{"info":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","description":"

Fluency v6.6 introduces access controlled token APIs. This allows a token to be created that has defined operational access.

In this documentation the

{{baseUrl}} is the https://<cloud instance> domain and protocol.
\n
{{fluencytoken}} is the API key that administrators can create on the 'User Admin->API Tokens' page.
\n

API Tokens have their own roles when created. These access permissions are enforced nby the API.

All calls to LavaDB produce both an aggregate and the supporting hits. The aggregate are the counts (number of occurrences) of that attribute in the total set. The hits is an array abject containing the documents of that query starting at the offset provided.

About Time Variables

There are two different types of time that a query might send, one in seconds (startSeconds & endSeconds) and the other in milliseconds (startTime & endTime).

When using postman, you can create the variables with the following code.

// Creates a four (4) hour window used for querying live data.\nvar d = new Date();\nvar n = d.getTime();\n\npm.globals.set(\"startTime\", n - 3600000);\npm.globals.set(\"endTime\", n);\n\nn =Math.floor(n / 1000);\npm.globals.set(\"startSeconds\", n - 3600);\npm.globals.set(\"endSeconds\", n);\n

What is a Day Index

Some original Fluency calls use a day index. A day index is a twenty-four (24) our time period based on Greenwich Mean Time (GMT). In the auditing and compliance world, GMT is the required way for data to be stored.

var moment = require('moment')\npm.globals.set(\"dayIndex\", moment().format(\"YYYYMMDD\"));\npm.globals.set(\"indexName\", moment().format(\"default_YYYYMMDD_s\"));\n

There are two such formats. An integer format that is full year, two-digit month, and two-digit day that make an integer. There is anohter with this same integrer, pre and post concatnated to form the name of a date index.

These variables appear in the API as:

{{dayIndex}} is the YYYYMMDD form.
\n
{{indexName}} is the default_YYYYMMDD_s form.
\n

\n","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json","toc":[],"owner":"1117493","collectionId":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","publishedId":"S1TR5fXn","public":true,"customColor":{"top-bar":"FFFFFF","right-sidebar":"303030","highlight":"FF0000"},"publishDate":"2019-08-06T11:34:53.000Z"},"item":[{"name":"Facets","item":[{"name":"List Facets","event":[{"listen":"test","script":{"id":"850824bd-879d-4150-b920-9fa26863e904","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"46b57224-7650-4acd-94e1-0cbcb913acf0","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"action\": \"list\",\n \"args\": {}\n }\n}"},"url":"{{baseUrl}}/api/ds/facet_config","description":"

Get a list of the facets available, using the \"list\" value for kargs.action key.

This call gets the name, description, table, and facet definition along with any query string (filter) used to search with the facet. Use the \"list\" value for the kargs.action key.

Facets are a key part to API calls in Fluency. Users can often save and later load custom facts. This makes the interface very powerful by being able to be adjusted to what types of data is aggregated in a call.

Searches are saved with the facts. This means in the interface, pages like User Tables -> Saved Searches, are saved as facets. This also means that deleting a saved search, deletes its facet.

An example of a facet in JSON format is:

{\n    \"title\": \"Category\",\n    \"size\": 50,\n    \"order\": \"count\",\n    \"field\": \"category.raw\"\n}\n

\n","event":[{"listen":"prerequest","script":{"id":"aeffdbc4-755b-402d-989a-f19106bb02ef","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"a0a18c75-68f2-4a1c-a500-ea850f9d6333","type":"text/javascript","exec":[""]}}],"_postman_id":"33f1eade-44b6-4d59-8bcd-93184e9982fa","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Recent Entity Data","item":[{"name":"Get Recent Artifacts","event":[{"listen":"prerequest","script":{"id":"0988d631-fdc8-40be-b3d1-89f059387d93","exec":["pm.environment.set(\"partition\", '\"default\"');","pm.environment.set(\"fetchOffset\", 0);","pm.environment.set(\"fetchLimit\", 20);","pm.environment.set(\"searchString\", '\"\"');","pm.environment.set(\"mustFilters\", `[]`);","pm.environment.set(\"mustNotFilters\", `[]`);","pm.environment.set(\"sortField\", '\"flowCount\"');","pm.environment.set(\"sortOrder\", '\"desc\"');","","let artifactType = \"ip\";","","switch (artifactType) {"," case \"alert\":"," pm.environment.set(\"artifactType\", '\"alert\"');"," pm.environment.set(\"facets\", `["," {"," \"title\": \"Incidents\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"incidents\""," },"," {"," \"title\": \"Tags\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"tags\""," },"," {"," \"title\": \"Classifications\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"classification\""," },"," {"," \"title\": \"Countries\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"fanInList.key\""," }"," ]`);"," break;"," case \"address\":"," pm.environment.set(\"artifactType\", '\"ip\"');"," pm.environment.set(\"facets\", `[{"," \"title\": \"Private\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"private\""," }, {"," \"title\": \"Filters\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"incidents\""," }, {"," \"title\": \"Tags\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"tags\""," }, {"," \"title\": \"Organizations\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"org\""," }]`);"," break;"," case \"host\":"," pm.environment.set(\"artifactType\", '\"host\"');"," pm.environment.set(\"facets\", `["," {"," \"title\": \"Private\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"private\""," },"," {"," \"title\": \"Issues\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"incidents\""," },"," {"," \"title\": \"Tags\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"tags\""," }"," ]`);"," break;"," case \"file\":"," pm.environment.set(\"artifactType\", '\"file\"');"," pm.environment.set(\"facets\", `["," {"," \"title\": \"Type\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"file_type\""," },"," {"," \"title\": \"# Positives\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"positives\""," }"," ]`);"," break;"," default: break;","}","",""],"type":"text/javascript"}},{"listen":"test","script":{"id":"0dbdd4b8-3050-40d7-b64c-892d0dee692d","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"3719a5f3-9895-4d6f-83e9-82ed4ae5d444","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"partition\": {{partition}},\n \"dayIndex\": \"{{dayIndex}}\",\n \"dataType\": \"ip\",\n \"options\": {\n \"fetchOffset\": {{fetchOffset}},\n \"fetchLimit\": {{fetchLimit}},\n \"searchStr\": {{searchString}},\n \"facets\": {\n \"facets\": {{facets}},\n \"mustFilters\": {{mustFilters}},\n \"mustNotFilters\": {{mustNotFilters}}\n },\n \"sortField\": {{sortField}},\n \"sortOrder\": {{sortOrder}}\n }\n }\n}"},"url":"{{baseUrl}}/api/ds/daily_artifact_lookup","description":"

Get an array of hits that contains a summary for each seen type of artifact.

The following parameters should be provided:

{{partition}}: sets the data partition guidelines to use. Usually, this parameter should be set to \"default\".
{{artifactType}}: the type of artifact that this method will retrieve
{{fetchOffset}}: a deprecated parameter, set this to 0
{{fetchLimit}}: limits the number of results retrieved. For default results, set this to 20
{{facets}}: complex versions of queries to Fluency's own database that can be saved. See the Facets folder for more information on how to write a facet.
{{mustFilters}}: filters that are required to be satisfied
{{mustNotFilters}}: filters that are required to be not satisfied
{{searchString}}: query used to perform search on the database (currently a Lucene search)
{{sortField}}: field to sort by (usually the same as {{dateFacetField}})
{{sortOrder}}: the order that results are sorted by. The options are \"desc\" for descending, and \"asc\" for ascending

Note that the {{dayIndex}} parameter is automatically generated using today's date

A summary of entity data is maintained for:

ip : IP Address (both IPv4 and IPv6)
host : Hostnames
alert : Alerts
file : Files

This call retrieves this data for a given dayIndex (a complete GMT date).

\n","_postman_id":"87e68ca4-1672-42f0-9057-2bb4b3a0677e","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Summary Entity Data","item":[{"name":"Artifact Search","event":[{"listen":"test","script":{"id":"f0e1464e-b46c-4af1-b17b-78f5488d5e63","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}},{"listen":"prerequest","script":{"id":"e8c6b847-ab84-4937-a78b-2689b04e517c","exec":["let artifactType = \"ip\";","","switch (artifactType) {"," case \"ip\":"," pm.environment.set(\"artifactType\", '\"ip_summary\"');"," pm.environment.set(\"artifactID\", '\"10.0.0.11\"'); // note that this ID is just the artifact to search for (the query)","}","","","pm.environment.set(\"partition\", '\"default\"');"],"type":"text/javascript"}}],"id":"906e8a3d-615a-453b-a0de-b101ad919f93","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"artifactType\": {{artifactType}},\n \"id\": {{artifactID}},\n \"partition\": {{partition}}\n }\n}"},"url":"{{baseUrl}}/api/ds/artifact_search","description":"

Provides a day-by-day summary of events for a given artifact. Note that the listed events are only for the topN (often top five) attributes. This call is used by the summary pages to show daily flow usage and a table of events.

The artifact types are (for the {{artifactType}} parameter):

ip_summary
alert_summary
host_summary
file_summary

Other parameters include:

{{artifactID}}: the artifact to search for (NOTE: this is NOT a unique ID)
{{partition}}: sets the data partition guidelines to use. Usually, this parameter should be set to \"default\".

This call retrieves high level data of an IP address (IP artifact). It can only review one address at a time, but unlike recent, it covers multiple days of activity.

Retrieves the VirusTotal Report of the given IP address, which is to be provided for the {{reportIP}} parameter.

Provides a list of passive hostnames that are associated with the IP address, given by the {{resolvedIP}} parameter.

The ability to see multiple days of data on a particular entity.

\n","event":[{"listen":"prerequest","script":{"id":"61308d51-5379-4da6-9c9a-f397ba8f1195","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"289903d9-8c82-4413-9170-d8af41cd2068","type":"text/javascript","exec":[""]}}],"_postman_id":"9aeddd73-d6c2-4823-8962-e6c5044be5bd","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Overview","item":[{"name":"Risk Dashboard","item":[{"name":"Retrieve Facet","event":[{"listen":"test","script":{"id":"94637263-ba39-4602-8d58-bc887d4bb754","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"1f9dddc2-8a85-43b1-a90a-389a3611098c","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"action\": \"list\",\n\t\t\"args\": {}\n\t}\n}"},"url":"{{baseUrl}}/api/ds/facet_config","description":"

Get a list of the facets available for the Risk Dashboard. Set the kargs.action parameter to \"list\"

Search through all notifications given a date range (from today) and the specified facets. Provide the following parameters:

{{fetchOffset}}: a deprecated parameter, set this to 0
{{fetchLimit}} limits the number of results retrieved. For default results, set this to 3000
{{facets}}: complex versions of queries to Fluency's own database that can be saved. See the Facets folder for more information on how to write a facet.
{{mustFilters}}: filters that are required to be satisfied
{{mustNotFilters}}: filters that are required to be not satisfied
{{searchString}}: query used to perform search on the database (currently a Lucene search)

Dashboard only had a DB Status call, so that was deleted

\n","_postman_id":"7b0f2991-d4de-4238-8951-9ce1f922d254","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Notifications","item":[{"name":"Retrieve Facet","event":[{"listen":"test","script":{"id":"9e6a1acd-e536-4ab4-80fc-58af166f903a","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"0f2cd1b9-f1ff-4adb-ae27-50d6e047545f","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","description":"

API Token for authentication

\n","type":"text"},{"key":"Accept","value":"application/json","description":"

Set the type of data to JSON

\n","type":"text"},{"key":"Accept-Encoding","value":"gzip, deflate, br","description":"

allow gzip

\n","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"action\": \"list\",\n\t\t\"args\": {}\n\t}\n}"},"url":"{{baseUrl}}/api/ds/facet_config","description":"

A base api facet call; get a list of the facets available for notifications. Set the kargs.action field to \"list\"

Request the payload to be JSON

\n","key":"Accept","type":"text","value":"application/json"},{"key":"fluencytoken","type":"text","value":"{{fluencytoken}}"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"options\": {\n\t\t\t\"fetchOffset\": {{fetchOffset}},\n\t\t\t\"fetchLimit\": {{fetchLimit}},\n\t\t\t\"facets\": {\n\t\t\t\t\"facets\": {{facets}},\n\t\t\t\t\"mustFilters\": {{mustFilters}},\n\t\t\t\t\"mustNotFilters\": {{mustNotFilters}}\n\t\t\t},\n\t\t\t\"searchStr\": {{searchString}}\n\t\t}\n\t}\n}"},"url":"{{baseUrl}}/api/ds/notification_search","description":"

Retrieve the notification data; search through notifications using specified facets.

{{fetchOffset}}: a deprecated parameter, set this to 0
{{fetchLimit}} limits the number of results retrieved. For default results, set this to 20
{{facets}}: complex versions of queries to Fluency's own database that can be saved. See the Facets folder for more
{{mustFilters}}: filters that are required to be satisfied
{{mustNotFilters}}: filters that are required to be not satisfied
{{searchString}}: query used to perform search on the database (currently a Lucene search)

Adding a date range to the notification search. Provide the following parameters:

{{fetchOffset}}: a deprecated parameter, set this to 0
{{fetchLimit}} limits the number of results retrieved. For default results, set this to 3000
{{facets}}: complex versions of queries to Fluency's own database that can be saved. See the Facets folder for more
{{mustFilters}}: filters that are required to be satisfied
{{mustNotFilters}}: filters that are required to be not satisfied
{{searchString}}: query used to perform search on the database (currently a Lucene search)

The {{startTime}} and {{endTime}} parameters are automaticaly generated (see the introduction for more information).

Notifications are the messages craeted and sent to the notification table by the processes. For instance, with the RiskScore module produces a result it will store the result as a JSON record in the nortification table.

\n","event":[{"listen":"prerequest","script":{"id":"f7cebcef-d68e-410e-b742-c6957b5c5991","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"109d58c7-6998-4476-8ccb-7b87d9cf3ca9","type":"text/javascript","exec":[""]}}],"_postman_id":"ad26299b-f14f-427c-9377-663de93c0649","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Risk Scores","item":[{"name":"Retrieve Facet","event":[{"listen":"test","script":{"id":"d0917477-5063-4484-b792-ff9f8ae06d70","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"92f45982-ca47-406b-b460-922be04bf4c2","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","type":"text","value":"{{fluencytoken}}"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"action\": \"list\",\n\t\t\"args\": {}\n\t}\n}"},"url":"{{baseUrl}}/api/ds/facet_config","description":"

This call retrieves the aggregation of the query elements and gets a list of the facets available.

This call retrieves risk score events for given search queries and date range (from today). Provide the following parameters:

{{fetchOffset}}: a deprecated parameter, set this to 0
{{fetchLimit}} limits the number of results retrieved. For default results, set this to 20
{{facets}}: complex versions of queries to Fluency's own database that can be saved. See the Facets folder for more
{{mustFilters}}: filters that are required to be satisfied
{{mustNotFilters}}: filters that are required to be not satisfied
{{searchString}}: query used to perform search on the database (currently a Lucene search)

The Risk Score engine reviews data that is fused by session from a source address in a time window. Sessions are organized by destination address. The score is the aggregate of all couple (source to destination) scores, while couples uses a patented back-off algorithm that favors unique vectors. This process highlights activity that contains supporting anomalies that the event requires review.

\n","_postman_id":"126482c3-2faa-4677-a560-7b893b9b5c76","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Trends (Tracking Data)","item":[{"name":"Get Incident Statistic Summary","event":[{"listen":"test","script":{"id":"a1951325-ac6b-4aee-8e7e-9cd77b151e56","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"b4f11f74-6959-461d-b7ec-a17f529c8d88","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"indexName\": \"{{indexName}}\"\n\t}\n}"},"url":"{{baseUrl}}/api/ds/get_incident_stat_summary","description":"

Retrieves summmary statistics for each type of tracking data.

Note about tags: there are two types of tags: issues (originally called incidents) and informational tags (or just tags). Incident tags are issues that are being tracked.

The variable {{indexName}} is automatically generated using today's date

Get a list of trending information over a number of days. Provide the following parameters:

{{facetFilters}}: further filters the facets used to provide chart data. Includes the type of ticketing object (e.g. incidents) and included/excluded fields (defaults to empty arrays)
{{interval}}: sets the interval to get data from. The default value is \"7d\" (seven days, or one week)

Note that {{dayIndex}} is automatically generated using today's date

Check the filter for a certain type of malware. Provide the {{malwareType}} parameter, which is the malware name. Examples include \"trojan_Kronos\" and \"upatre\", and set kargs.dtype to \"label\"

These are the API calls used to create the trending pages,

\n","_postman_id":"6c1c2347-1226-4f29-a2aa-92513e71f10f","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Charts","item":[{"name":"Sankey Diagram","event":[{"listen":"test","script":{"id":"c96175ac-df48-4cd8-a4e0-879ab026dcb4","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"c8688ee3-89dc-4a49-ac3a-dc45a68ff3e0","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"dayIndex\": \"{{dayIndex}}\",\n \"action\": \"list\"\n }\n}"},"url":"{{baseUrl}}/api/ds/get_sankey_diagram","description":"

Retrieves the data needed to create the Sankey diagram. For reference, sankey diagrams are flow diagram in which the width of the arrows are proportional to the flow quantity, helpful for locating dominant contributions to overall flow. Note that the {{dayIndex}} parameter is automatically generated using today's date, and use the \"list\" value for kargs.action key.

Get data for histograms; the collection of histogram charts is done with a single call.

Bucket Groups include:

normal:service
tag
alert
stream:import
scanner:service
applications
status_fusion
status_loader
tls_fingerprints

Each entry is formatted as follows:

{\n    \"bucketGroup\"\n    \"interval\"\n    \"epochStart\"\n    \"epochEnd\"\n    \"topCount\"\n    \"sortField\"\n}\n

An example would be the following:

{\n    \"bucketGroup\": \"normal:service\",\n    \"interval\": \"hour\",\n    \"epochStart\": {{startSeconds}},\n    \"epochEnd\": {{endSeconds}},\n    \"topCount\": 10,\n    \"sortField\": \"bytes\"\n}\n

The start and end times of the epoch for each bucket, given by the {{startSeconds}} and {{endSeconds}} parameters, are automatically generated using a UNIX timestamp (see the introduction for more information). Set the kargs.action field to \"list\".

Used to create the overall seven day tending and spupporting bar charts. Provide the following parameters:

{{interval}}: sets the interval to get data from. The default value is \"7d\" (seven days, or one week)
{{facetFilters}}: further filters the facets used to provide chart data. Includes the type of ticketing object (e.g. incidents, dip, sip) and included/excluded fields (defaults to empty arrays)
{{partition}}: sets the data partition guidelines to use. Usually, this parameter should be set to \"default\".

Set the kargs.action field to \"list\".

Load TopN Summary for logged activity for a given day. Provide the {{partition}} parameter, which sets the data partition guidelines to use. Usually, this parameter should be set to \"default\". Note that the {{dayIndex}} parameter is automatically generated using today's date. Set the kargs.action field to \"list\" and the kargs.dataType field to\"top\".

The API calls are used to create charts in the interface.

\n","_postman_id":"0514c7ea-5afb-4079-acbe-80431be13b06","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}}],"id":"a8e97d3b-a748-4944-a0c5-405764a66431","_postman_id":"a8e97d3b-a748-4944-a0c5-405764a66431","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"User Tables","item":[{"name":"Saved Searches","item":[{"name":"Retrieve Facet","event":[{"listen":"test","script":{"id":"40a7fcf2-b02d-4891-a8cf-a627ec8be660","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"00624796-fa41-41bd-b50f-f1772050844c","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"action\": \"list\"\n\t}\n}"},"url":"{{baseUrl}}/api/ds/facet_config","description":"

This call retrieves the aggregation of the query elements and gets a list of the facets available. Set the kargs.action field to \"list\".

Adds or updates a saved search. Regardless of the action, adding or updating, the following parameters should be provided:

{{searchName}}: the name to refer to the saved search
{{searchDescription}}: a short description of the saved search to note its purpose and significance
{{facets}}: complex versions of queries to Fluency's own database that can be saved. See the Facets folder for more information on how to write a facet.
{{searchTarget}}: the target data source of the search. The options include:
- \"event\"
- \"metaflow\"
- \"userFiles\"
\n
Although not listed as a parameter (due to technical issues), the kargs.args.entry.query field should be replaced with with the desired query to the database.

The {{updateTime}} parameter will automatically be filled out with an ISODate representation of the current date and time

The following lists action-dependent parameters:

Add

Set the {{kAction}} parameter to \"add\"
The {{createTime}} parameter will automatically be filled out with an ISODate representation of the current date and time

Update

Set the {{kAction}} parameter to \"update\"
Fill in the to the search's unique ID number for the {{searchID}} parameter

Delete a saved search in this Fluency product specifying the search ID, given by {{searchID}} parameter (example: \"5d3f474632a94472264974a7\"). Use the \"delete\" value for the kargs.action key.

This page allows users to operate their saved searches, including viewing, adding, updating, and deleting searches.

The variables used are:

{{kAction}}: the action taken for the respective method. For:
- Retrieving (viewing) all searches: \"list\"
- Adding a search: \"add\"
- Updating a search: \"update\"
- Deleting a search: \"delete\"
\n
{{searchID}}: the ID of a search. This is unique for each search
{{searchName}}: the name of a search.
{{searchQuery}}: the search query for the search
{{searchDescription}}: a short description of the search
{{facetTitle}}: the title of each facet
{{searchTarget}}: the search's target. The options for this include: \"event\", \"metaflow\", \"userFiles\"
{{createTime}}: the time of the search
{{updateTime}}: the most recent time that the search was modified

\n","_postman_id":"88995303-0c4c-4f52-ad01-8744b6f1f3af","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Filters","item":[{"name":"List Filters","event":[{"listen":"prerequest","script":{"id":"1d6edc4a-75ad-4f17-b6ad-dac004f41650","exec":["pm.environment.set(\"fetchOffset\", 0);","pm.environment.set(\"fetchLimit\", 20);","pm.environment.set(\"searchString\", '\"\"');","pm.environment.set(\"facets\", `[{"," \"title\": \"Types\","," \"size\": 10,"," \"order\": \"count\","," \"field\": \"dtype\""," }, {"," \"title\": \"Issues\","," \"size\": 30,"," \"order\": \"count\","," \"field\": \"incidents\""," }, {"," \"title\": \"Tags\","," \"size\": 30,"," \"order\": \"count\","," \"field\": \"tags\""," }]`);","pm.environment.set(\"mustFilters\", `[]`);","pm.environment.set(\"mustNotFilters\", `[]`);"],"type":"text/javascript"}},{"listen":"test","script":{"id":"6790e0a6-d2b7-47f4-8d31-26a4612c8523","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"8d3a6834-da2b-4705-b2c9-ae0dcc23e299","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"options\": {\n \"fetchOffset\": {{fetchOffset}},\n \"fetchLimit\": {{fetchLimit}},\n \"searchStr\": {{searchString}},\n \"facets\": {\n \"facets\": {{facets}},\n \"mustFilters\": {{mustFilters}},\n \"mustNotFilters\": {{mustNotFilters}}\n }\n }\n }\n}"},"url":"{{baseUrl}}/api/ds/filter_search","description":"

Returns a detailed list of data filters. Provide th following parameters:

{{fetchOffset}}: a deprecated parameter, set this to 0
{{fetchLimit}} limits the number of results retrieved. For default results, set this to 20
{{searchString}}: query used to perform search on the database (currently a Lucene search)
{{facets}}: complex versions of queries to Fluency's own database that can be saved. See the Facets folder for more information on how to write a facet.
{{mustFilters}}: filters that are required to be satisfied
{{mustNotFilters}}: filters that are required to be not satisfied

Get a list of all incidents (issues), tags and labels.

Searches for artifact filter given the filter to use, given the artifact to find the filter for, {{filterObj}}.

An issues tag was originally called the incident tag, but customers did not want to document indication of compromise as incidents, so it was changed to issues in the interface. This tag when associated with an attribute will cause the system to track the activity by labelling it.

Provide the following parameters:

{{filterDescription}}: a short description of the filter
{{dataType}}: the data type the filter should used for. The options are as follows:
- IP address
- Subnet
- Host
- Domain
- Alert Id (labeled as \"sid\" in the system))
- Field
- Label
- MD5
\n
{{filterArtifact}}: the artifact that the filter is for
{{filterIncients}}: the incidents to include
{{filterTags}}: the tags to include

The {{startTime}} and {{endTime}} parameters are automatically generated (see the introduction for more information).

This call will delete a tag. When deleting the system needs the data type of artifact (dtype) and the value (key) of the artifact. The following parameters are needed:

{{filterID}}: the unique ID of the filter. When filters are listed, there is an ID used that is unique (given by the variable {{filterID}} (Example: \"AWsFdThrVy023BsKCr4i\").
{{dataType}}: the data type the tag should used for. The options are as follows:
- IP address
- Subnet
- Host
- Domain
- Alert Id (gets converted to source ID in code)
- Field
- Label
- MD5
\n
{{filterArtifact}}: the artifact that the filter is for

Delete a list of artifact filters, given a list (in array structure) of artifact filters for the parameter {{filterIDList}}

Filters are labels, often refered to by other names like tags, issues and incidents.

\n","_postman_id":"0928babe-1a4f-473e-9f94-8fd68d861d62","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Alert Filters","item":[{"name":"Get list of Alert Filters","event":[{"listen":"prerequest","script":{"id":"c1c73d0d-e84a-44cb-960d-121a591c204f","exec":[""],"type":"text/javascript"}},{"listen":"test","script":{"id":"521a3c7c-9627-4aa1-8240-a21edcd1e795","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"9029a0fe-b780-4372-9864-7293d9a73521","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"action\": \"list\"\n }\n}"},"url":"{{baseUrl}}/api/ds/alert_filter","description":"

Retrieves an array of alert filers. This call requires administrative rights, use the \"list\" value for the kargs.action key.

Call to add or update an alert filter. Provide the following parameters:

{{filterQuery}}: the query used to make the alert filter
{{filterAction}}: the action the alert filter should make when it finds a matching piece of data to its query. The types of actions are listed:
- \"STOP\"
- \"CONTINUE\"
- \"BREAK\"
\n
{{filterDescription}}: a short description of the alert filter, including what it does and what action it takes\nThe {{startTime}} and {{endTime}} parameters are automatically generated with the current UNIX timestamp in nanoseconds (see the introduction for more information).

The following parameters are action-dependent:

Add

Set the {{kAction}} parameter to \"add\"

Update

Set the {{kAction}} parameter to \"update\"
Add the unique ID (example: \"5d40be570f980746be2bfcfa\") of the alert filter to the kargs object, specifically:
- kargs.args.id
- kargs.args.entry._id
\n
Add kargs.args.entry.__index. Ths is the index of the alert filter, where it appears in the list of alert filters, 0 is the top entry, 1 is the second entry, etc.

Call to delete an alert filter, providing the ID of the alert filter for the parameter {{filterID}}. Use the \"delete\" option for the {{kAction}} field.

These are special filters. Alert filters prevent the systen from alerting on signatures. The system will record the alert, but will not use it for calculating risk. These filters can be thought of ingore filters.

Some variables to keep track of:

kAction: the action to take. This value will be:
- \"list\" for retrieving all alert filters
- \"add\" for adding an alert filter
- \"update\" for udpating an alert filter
- \"delete\" for deleting an alert filter
\n
filterQuery: the query that the filter uses to block out different options
filterAction: the action that the filter will take when a result matches the query. This includes:
- STOP
- CONTINUE
- BREAK
\n
filterDescription: a short description of what the filter should recognize and what action it takes
filterID: the unique ID of the filter

\n","_postman_id":"85670854-e919-4f4a-8f8f-2c337ea12710","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Anomalies","item":[{"name":"Get TopN Key Fields","event":[{"listen":"test","script":{"id":"58a28d21-1b20-49cd-b88c-0365532c068f","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}},{"listen":"prerequest","script":{"id":"5c82065b-f7b5-4963-afbf-adc267acc766","exec":["pm.environment.set(\"watchTopN\", 20);","pm.environment.set(\"watchSortType\", \"area\");","","let watchType = \"device\";","switch (watchType) {"," case \"subnet\":"," pm.environment.set(\"watchBgroup\", \"ipstat\");"," pm.environment.set(\"watchFields\", '[\"flows\", \"totalB\"]');"," break;"," case \"device\":"," pm.environment.set(\"watchBgroup\", \"stream:import\");"," pm.environment.set(\"watchFields\", '[\"flows\"]');"," break;"," case \"alert\":"," pm.environment.set(\"watchBgroup\", \"alert\");"," pm.environment.set(\"watchFields\", '[\"flows\"]');"," break;"," case \"application\":"," pm.environment.set(\"watchBgroup\", \"applications\");"," pm.environment.set(\"watchFields\", '[\"flows\", \"rxB\", \"txB\"]');"," break;"," case \"service\":"," pm.environment.set(\"watchBgroup\", \"normal:service\");"," pm.environment.set(\"watchFields\", '[\"flows\", \"bytes\"]');"," break;"," case \"ip\":"," pm.environment.set(\"watchBgroup\", \"ipDailySummary\");"," pm.environment.set(\"watchFields\", '[\"flows\", \"rxB\", \"txB\", \"fanOut\", \"fanIn\"]');"," break;"," case \"qradar\":"," pm.environment.set(\"watchBgroup\", \"QRadar\");"," pm.environment.set(\"watchFields\", '[\"count\"]');"," break;"," case \"paloalto\":"," pm.environment.set(\"watchBgroup\", \"PaloAlto\");"," pm.environment.set(\"watchFields\", '[\"count\"]');"," break;"," ","}"],"type":"text/javascript"}}],"id":"48884414-cf41-4a0e-ab73-265add443f75","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"fields\": {{watchFields}},\n\t\t\"bgroup\": \"{{watchBgroup}}\",\n\t\t\"topN\": {{watchTopN}},\n\t\t\"sort_type\": \"{{watchSortType}}\",\n\t\t\"start_ts\": {{startSeconds}}\n\t}\n}"},"url":"{{baseUrl}}/api/ds/get_topn_key_fields","description":"

This method retrieves the topN key fields for a given anomaly watch. The parameters to provide are:

{{watchFields}}: these are the fields that the watch should import data from:
- Subnet Watch:\n [\"flows\", \"totalB\"]
- Device Watch:\n [\"flows\"]
- Alert Watch:\n [\"flows\"]
- Application Watch:\n [\"flows\", \"rxB\", \"txB\"]
- Service Watch:\n [\"flows\", \"bytes\"]
- IP Watch:\n [\"flows\", \"rxB\", \"txB\", \"fanOut\", \"fanIn\"]
- QRadar Watch:\n [\"count\"]
- Palo Alto Watch:\n [\"count\"]
\n
{{watchBgroup}}: this is the group that the anomaly watch is stored under. Use the following names:
- Subnet Watch: \"ipstat\"
- Device Watch: \"stream:import\"
- Alert Watch: \"alert\"
- Application Watch: \"applications\"
- Service Watch: \"normal:service\"
- IP Watch: \"ipDailySummary\"
- QRadar Watch: \"QRadar\"
- Palo Alto Watch: \"PaloAlto\"
\n
{{watchTopN}}: number of results to show. Set this value to 20 for default settings
{{watchSortType}}: the sorting version that Fluency should use. Set this parameter to \"area\" (currently no other options)

The parameter {{startSeconds}} is the current time in milliseconds represented by a UNIX timestamp, and is autogenerated by a script.

Searches for any anomaly, provided the following under kargs.options:

{{fetchOffset}}: deprecated variable, set to 0
{{fetchLimit}}: the number of results to keep if provided facets generate many results (i.e. more than fetchLimit). The default is 20
{{searchString}}: the query used to search the native database (LavaDB)
{{facets}}: complex versions of queries to Fluency's own database that can be saved. See the Facets folder for more information on how to write a facet.
{{mustFilters}}: filters that must be satisfied. Do not to use this in conjunction with mustNotFilters
{{mustNotFilters}}: filters that must be unsatisfied (i.e. exclude all results that those filters would return). Do not to use this in conjunction with mustFilters

\n","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","anomaly_search"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[{"id":"f88f887c-b9f4-4c65-9c3d-ae9aae9df1f0","name":"Anomaly Search","originalRequest":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"options\": {\n \"searchStr\": \"bucket:stream\\\\:import AND fields.score:[40 TO 1000] AND epoch:[1561129094 TO 1561388294]\",\n \"fetchOffset\": 0,\n \"fetchLimit\": 16384,\n \"facets\": {\n \"facets\": [\n {\n \"field\": \"fields.field\",\n \"order\": \"count\",\n \"size\": 10\n }\n ],\n \"mustFilters\": [\n {\n \"field\": \"fields.field\",\n \"terms\": [\n \"flows\"\n ]\n },\n {\n \"field\": \"key\",\n \"terms\": [\n \"__total\",\n \"vpcFlows\",\n \"cloud.securitydo.com\",\n \"127.0.0.1\",\n \"aws-cloudTrail\",\n \"office365\",\n \"gsuites\"\n ]\n }\n ],\n \"mustNotFilters\": []\n }\n }\n }\n}"},"url":"{{baseUrl}}/api/ds/anomaly_search"},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[],"cookie":[],"responseTime":null,"body":"{\n \"verdict\": \"OK\",\n \"response\": {\n \"took\": 5,\n \"_scroll_id\": \"\",\n \"hits\": {\n \"total\": 270,\n \"max_score\": null,\n \"hits\": [\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f9c5be682842ecd991ce9\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561304155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 91.64754486083984,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 1314.7476838626574,\n \"dayofweek\": 0,\n \"zscore\": 5.907470633844206,\n \"min\": 289,\n \"max\": 4427,\n \"value\": 9834,\n \"cv\": 0.636014359685233,\n \"score\": 91.6475462245442,\n \"wscore\": 189450.75263717028,\n \"percentile\": 0.9999999965259977,\n \"hourofday\": 14,\n \"pctofavg\": 475.723615254374,\n \"avg\": 2067.1666666666665,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T15:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561298400,\n \"key\": \"cloud.securitydo.com\",\n \"maxScore\": 91.64754486083984\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f9c5be682842ecd991cea\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561304155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9980607628822327,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 71.90830993652344,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 110397.22952934941,\n \"zscore\": 3.0993833341457004,\n \"min\": 1016,\n \"max\": 1904,\n \"value\": 2443,\n \"zpts\": 0,\n \"std\": 292.8808418111366,\n \"score\": 71.9083077865816,\n \"percentile\": 0.9980607606487197,\n \"hourofday\": 14,\n \"pctofavg\": 159.12717798404168,\n \"avg\": 1535.25,\n \"pts\": 12,\n \"cv\": 0.1907707811829582\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9980607628822327\n }\n ],\n \"createdOn\": \"2019-06-23T15:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561298400,\n \"key\": \"aws-cloudTrail\",\n \"maxScore\": 71.90830993652344\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f9c5be682842ecd991ceb\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561304155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9731477499008179,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 50.42258071899414,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 9181.49357790976,\n \"zscore\": 2.2136589354896175,\n \"min\": 22,\n \"max\": 492,\n \"value\": 496,\n \"cv\": 0.7787623021635417,\n \"std\": 141.80553556668855,\n \"score\": 50.42258080729274,\n \"percentile\": 0.9731477502012106,\n \"hourofday\": 14,\n \"pctofavg\": 272.391412880679,\n \"avg\": 182.0909090909091,\n \"pts\": 11,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9731477499008179\n }\n ],\n \"createdOn\": \"2019-06-23T15:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561298400,\n \"key\": \"office365\",\n \"maxScore\": 50.42258071899414\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f9c5be682842ecd991cec\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561304155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 97.18543243408203,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 84.63001831501633,\n \"wscore\": 84706.82542198781,\n \"zscore\": -10.275313858058123,\n \"min\": 817,\n \"max\": 1037,\n \"value\": 2,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 97.18543531664504,\n \"percentile\": 1,\n \"hourofday\": 14,\n \"pctofavg\": 0.22946305644791187,\n \"avg\": 871.6,\n \"pts\": 5,\n \"cv\": 0.09709731334903204\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T15:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561298400,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 97.18543243408203\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8e4be682842ecd991ce4\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561300555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 99.92061614990234,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 3952268.298049753,\n \"zscore\": 61.46551803469419,\n \"min\": 32667,\n \"max\": 48943,\n \"value\": 355598,\n \"zpts\": 0,\n \"std\": 5141.808395534482,\n \"score\": 99.92061413085676,\n \"percentile\": 1,\n \"hourofday\": 13,\n \"pctofavg\": 899.017168476074,\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"cv\": 0.12999437636319422\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T14:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561294800,\n \"key\": \"__total\",\n \"maxScore\": 99.92061614990234\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8e4be682842ecd991ce5\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561300555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 99.96439361572266,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 3242686.6825520485,\n \"zscore\": 91.78604782128203,\n \"min\": 28785,\n \"max\": 38052,\n \"value\": 308999,\n \"cv\": 0.09288679208834025,\n \"std\": 3013.1004645916178,\n \"score\": 99.96439455949756,\n \"percentile\": 1,\n \"hourofday\": 13,\n \"pctofavg\": 952.5711540585879,\n \"avg\": 32438.416666666668,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T14:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561294800,\n \"key\": \"vpcFlows\",\n \"maxScore\": 99.96439361572266\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8e4be682842ecd991ce6\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561300555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 99.4348373413086,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 252456.7636299624,\n \"zscore\": 23.017788344437207,\n \"min\": 242,\n \"max\": 7195,\n \"value\": 44670,\n \"cv\": 0.7209258325762639,\n \"std\": 1830.370611758419,\n \"score\": 99.43483649717888,\n \"percentile\": 1,\n \"hourofday\": 13,\n \"pctofavg\": 1759.4118226277612,\n \"avg\": 2538.9166666666665,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T14:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561294800,\n \"key\": \"cloud.securitydo.com\",\n \"maxScore\": 99.4348373413086\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8e4be682842ecd991ce8\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561300555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.09537506103516,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 99.63653948226022,\n \"dayofweek\": 0,\n \"zscore\": -8.707648865650054,\n \"avg\": 868.6,\n \"min\": 803,\n \"max\": 1067,\n \"value\": 1,\n \"zpts\": 0,\n \"score\": 96.09537689535884,\n \"percentile\": 1,\n \"hourofday\": 13,\n \"pctofavg\": 0.11512779184895235,\n \"wscore\": 83468.4443713087,\n \"pts\": 5,\n \"cv\": 0.11470934778063575\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T14:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561294800,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 96.09537506103516\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8ac7e682842ecd991ce2\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561299655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 146,\n \"cfgvalue\": \"250\",\n \"cfgtype\": \"exceed\",\n \"limit\": 75.87121212121212,\n \"duration\": \"10m\",\n \"avg\": 182.0909090909091,\n \"pts\": 11,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T14:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561298755,\n \"key\": \"office365\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8ac7e682842ecd991ce3\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561299655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 1445,\n \"cfgtype\": \"exceed\",\n \"cfgvalue\": \"250\",\n \"limit\": 861.3194444444443,\n \"duration\": \"10m\",\n \"avg\": 2067.1666666666665,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T14:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561298755,\n \"key\": \"cloud.securitydo.com\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8617e682842ecd991cdf\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561298455313\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 10,\n \"datasum\": 343487,\n \"cfgvalue\": \"250\",\n \"cfgtype\": \"exceed\",\n \"limit\": 16480.868055555555,\n \"duration\": \"10m\",\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T14:00:55.313000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561297555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8617e682842ecd991ce0\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561298455313\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 300460,\n \"cfgtype\": \"exceed\",\n \"cfgvalue\": \"250\",\n \"limit\": 13516.006944444445,\n \"duration\": \"10m\",\n \"avg\": 32438.416666666668,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T14:00:55.313000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561297555,\n \"key\": \"vpcFlows\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8617e682842ecd991ce1\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561298455313\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 42851,\n \"cfgtype\": \"exceed\",\n \"cfgvalue\": \"250\",\n \"limit\": 1057.8819444444443,\n \"duration\": \"10m\",\n \"avg\": 2538.9166666666665,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T14:00:55.313000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561297555,\n \"key\": \"cloud.securitydo.com\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f83bfe682842ecd991cde\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561297855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 268,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 659.2347222222223,\n \"duration\": \"10m\",\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T13:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561296955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f8167e682842ecd991cdd\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561297255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 346,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 659.2347222222223,\n \"duration\": \"10m\",\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T13:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561296355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f803be682842ecd991cda\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561296955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 93.61016082763672,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 3630124.107881268,\n \"zscore\": -6.777527653622896,\n \"min\": 31779,\n \"max\": 47412,\n \"value\": 2168,\n \"cv\": 0.13929765264987845,\n \"std\": 5401.846888385078,\n \"score\": 93.61016287649129,\n \"percentile\": 0.999999999987775,\n \"hourofday\": 12,\n \"pctofavg\": 5.590630708069195,\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T13:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561291200,\n \"key\": \"__total\",\n \"maxScore\": 93.61016082763672\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f803be682842ecd991cdc\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561296955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 92.97990417480469,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"std\": 143.61420542550798,\n \"zscore\": -6.458971083338562,\n \"avg\": 928.6,\n \"min\": 799,\n \"max\": 1200,\n \"value\": 1,\n \"zpts\": 0,\n \"score\": 92.97990767521041,\n \"percentile\": 0.9999999998945828,\n \"hourofday\": 12,\n \"pctofavg\": 0.10768899418479431,\n \"wscore\": 86341.1422672004,\n \"pts\": 5,\n \"cv\": 0.15465669332921383\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T13:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561291200,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 92.97990417480469\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f7f0fe682842ecd991cd9\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561296655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 250,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 659.2347222222223,\n \"duration\": \"10m\",\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T13:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561295755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f7a5fe682842ecd991cd8\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561295455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 360,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 646.3194444444443,\n \"duration\": \"10m\",\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T13:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561294555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f7807e682842ecd991cd7\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561294855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 313,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 646.3194444444443,\n \"duration\": \"10m\",\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T13:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561293955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f722be682842ecd991cd5\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561293355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.46382904052734,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 3652814.0795462555,\n \"zscore\": -7.292219111105473,\n \"min\": 32695,\n \"max\": 47509,\n \"value\": 1992,\n \"cv\": 0.1300681921052404,\n \"std\": 5029.596081501531,\n \"score\": 94.46383282557926,\n \"percentile\": 0.9999999999996951,\n \"hourofday\": 11,\n \"pctofavg\": 5.1514243783228135,\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T12:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561287600,\n \"key\": \"__total\",\n \"maxScore\": 94.46382904052734\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f722be682842ecd991cd6\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561293355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9890018105506897,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 60.40700912475586,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 312.1940724755819,\n \"wscore\": 48013.503139953486,\n \"zscore\": -2.5427559435659135,\n \"min\": 134,\n \"max\": 1086,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 60.407007515143825,\n \"percentile\": 0.9890017980534166,\n \"hourofday\": 11,\n \"pctofavg\": 0.12581253931641853,\n \"avg\": 794.8333333333334,\n \"pts\": 6,\n \"cv\": 0.39277929017686963\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9890018105506897\n }\n ],\n \"createdOn\": \"2019-06-23T12:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561287600,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 60.40700912475586\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f6ea7e682842ecd991cd4\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561292455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 212,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 646.3194444444443,\n \"duration\": \"10m\",\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T12:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561291555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f6c4fe682842ecd991cd3\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561291855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 407,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T12:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561290955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f69f7e682842ecd991cd2\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561291255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 196,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T12:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561290355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f679fe682842ecd991cd1\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561290655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 165,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T11:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561289755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f6547e682842ecd991cd0\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561290055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 259,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T11:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561289155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f641be682842ecd991cce\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561289755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 95.97576904296875,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 4206.631134292618,\n \"wscore\": 3623565.2904864233,\n \"zscore\": -8.57550825075281,\n \"min\": 31549,\n \"max\": 46132,\n \"value\": 1681,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 95.97577249334984,\n \"percentile\": 1,\n \"hourofday\": 10,\n \"pctofavg\": 4.452390411865978,\n \"avg\": 37755,\n \"pts\": 12,\n \"cv\": 0.1114191798249932\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T11:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561284000,\n \"key\": \"__total\",\n \"maxScore\": 95.97576904296875\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f641be682842ecd991ccf\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561289755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.73918914794922,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 84081.03007478472,\n \"zscore\": -7.4842112100957525,\n \"min\": 792,\n \"max\": 1145,\n \"value\": 1,\n \"zpts\": 0,\n \"std\": 118.44935626671848,\n \"score\": 94.73918881665884,\n \"percentile\": 0.9999999999999281,\n \"hourofday\": 10,\n \"pctofavg\": 0.11267605633802817,\n \"avg\": 887.5,\n \"pts\": 6,\n \"cv\": 0.13346406339911943\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T11:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561284000,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 94.73918914794922\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f62efe682842ecd991ccd\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561289455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 191,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T11:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561288555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f5e3fe682842ecd991ccc\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561288255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 108,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 629.25,\n \"duration\": \"10m\",\n \"avg\": 37755,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T11:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561287355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f5be7e682842ecd991ccb\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561287655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 90,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 629.25,\n \"duration\": \"10m\",\n \"avg\": 37755,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T11:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561286755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f598fe682842ecd991cca\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561287055243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 133,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 629.25,\n \"duration\": \"10m\",\n \"avg\": 37755,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T10:50:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561286155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f5737e682842ecd991cc9\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561286455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 121,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 629.25,\n \"duration\": \"10m\",\n \"avg\": 37755,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T10:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561285555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f560be682842ecd991cc7\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561286155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 97.19373321533203,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 3462.4847733319425,\n \"wscore\": 3639532.6344083766,\n \"zscore\": -10.290634905053707,\n \"min\": 31621,\n \"max\": 44322,\n \"value\": 1815,\n \"cv\": 0.09246566689065483,\n \"dayofweek\": 0,\n \"score\": 97.1937305841286,\n \"percentile\": 1,\n \"hourofday\": 9,\n \"pctofavg\": 4.846958077595838,\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T10:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561280400,\n \"key\": \"__total\",\n \"maxScore\": 97.19373321533203\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f560be682842ecd991cc8\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561286155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.36714935302734,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 97.17624309584221,\n \"wscore\": 84674.60377080161,\n \"zscore\": -9.031699916625183,\n \"min\": 810,\n \"max\": 1091,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 96.36715148422034,\n \"percentile\": 1,\n \"hourofday\": 9,\n \"pctofavg\": 0.11380880121396054,\n \"avg\": 878.6666666666666,\n \"pts\": 6,\n \"cv\": 0.11059511733214213\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T10:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561280400,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 96.36714935302734\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f502fe682842ecd991cc6\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561284655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 172,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 624.1027777777778,\n \"duration\": \"10m\",\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T10:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561283755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f4dd7e682842ecd991cc5\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561284055244\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 310,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 624.1027777777778,\n \"duration\": \"10m\",\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T10:00:55.244000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561283155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f4b7fe682842ecd991cc4\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561283455243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 198,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 624.1027777777778,\n \"duration\": \"10m\",\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T09:50:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561282555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f47fbe682842ecd991cc1\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561282555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.77304077148438,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 3636.0572472879953,\n \"wscore\": 3544425.589148507,\n \"zscore\": -9.589553820329309,\n \"min\": 31307,\n \"max\": 42061,\n \"value\": 1758,\n \"cv\": 0.09927485123899568,\n \"dayofweek\": 0,\n \"score\": 96.77304265571082,\n \"percentile\": 1,\n \"hourofday\": 8,\n \"pctofavg\": 4.799847103846522,\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T09:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561276800,\n \"key\": \"__total\",\n \"maxScore\": 96.77304077148438\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f47fbe682842ecd991cc3\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561282555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.7033462524414,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 85147.29645619715,\n \"zscore\": -9.486512586880975,\n \"min\": 789,\n \"max\": 1074,\n \"value\": 1,\n \"zpts\": 0,\n \"std\": 92.71057113404059,\n \"score\": 96.70334634434656,\n \"percentile\": 1,\n \"hourofday\": 8,\n \"pctofavg\": 0.1135718341851221,\n \"avg\": 880.5,\n \"pts\": 6,\n \"cv\": 0.10529309612043225\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T09:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561276800,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 96.7033462524414\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f4477e682842ecd991cc0\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561281655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 183,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 624.1027777777778,\n \"duration\": \"10m\",\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T09:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561280755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f421fe682842ecd991cbf\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561281055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 307,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 610.436111111111,\n \"duration\": \"10m\",\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T09:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561280155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f3fc7e682842ecd991cbe\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561280455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 149,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 610.436111111111,\n \"duration\": \"10m\",\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T09:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561279555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f39ebe682842ecd991cbb\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561278955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.08329772949219,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 5056.115045582593,\n \"wscore\": 3551479.7162390514,\n \"zscore\": -7.049137465955983,\n \"min\": 31022,\n \"max\": 48302,\n \"value\": 2107,\n \"cv\": 0.13394303167915314,\n \"dayofweek\": 0,\n \"score\": 94.08329435772656,\n \"percentile\": 0.9999999999981997,\n \"hourofday\": 7,\n \"pctofavg\": 5.581715708675237,\n \"avg\": 37748.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T08:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561273200,\n \"key\": \"__total\",\n \"maxScore\": 94.08329772949219\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f39ebe682842ecd991cbd\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561278955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.00038146972656,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 86934.68624460351,\n \"zscore\": -6.999245098081686,\n \"min\": 786,\n \"max\": 1108,\n \"value\": 1,\n \"cv\": 0.1427180660337512,\n \"std\": 131.9904247368809,\n \"score\": 94.00038159445324,\n \"percentile\": 0.9999999999974265,\n \"hourofday\": 7,\n \"pctofavg\": 0.10812759055685708,\n \"avg\": 924.8333333333334,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T08:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561273200,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 94.00038146972656\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f38bfe682842ecd991cba\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561278655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 81,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 610.436111111111,\n \"duration\": \"10m\",\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T08:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561277755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f3667e682842ecd991cb9\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561278055243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 213,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 610.436111111111,\n \"duration\": \"10m\",\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T08:20:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561277155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f340fe682842ecd991cb8\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561277455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 108,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 629.1375,\n \"duration\": \"10m\",\n \"avg\": 37748.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T08:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561276555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f31b7e682842ecd991cb7\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561276855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 142,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 629.1375,\n \"duration\": \"10m\",\n \"avg\": 37748.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T08:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561275955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f2d07e682842ecd991cb6\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561275655244\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 227,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 629.1375,\n \"duration\": \"10m\",\n \"avg\": 37748.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T07:40:55.244000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561274755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f2bdbe682842ecd991cb3\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561275355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9784971475601196,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 53.30282974243164,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 159.67557734356248,\n \"dayofweek\": 0,\n \"zscore\": 2.299036622301589,\n \"avg\": 224.9,\n \"min\": 60,\n \"max\": 538,\n \"value\": 592,\n \"zpts\": 0,\n \"score\": 53.30282883832272,\n \"percentile\": 0.9784971401800525,\n \"hourofday\": 6,\n \"pctofavg\": 263.2281013783904,\n \"wscore\": 11987.80620573878,\n \"pts\": 10,\n \"cv\": 0.709984781429802\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9784971475601196\n }\n ],\n \"createdOn\": \"2019-06-23T07:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561269600,\n \"key\": \"office365\",\n \"maxScore\": 53.30282974243164\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f2bdbe682842ecd991cb4\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561275355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9999998211860657,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 89.29278564453125,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"std\": 187.5337006750757,\n \"zscore\": -5.195510619296534,\n \"avg\": 975.3333333333334,\n \"min\": 808,\n \"max\": 1285,\n \"value\": 1,\n \"cv\": 0.19227652153972216,\n \"score\": 89.29278532025874,\n \"percentile\": 0.999999795841319,\n \"hourofday\": 6,\n \"pctofavg\": 0.10252904989747096,\n \"wscore\": 87090.2299490257,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9999998211860657\n }\n ],\n \"createdOn\": \"2019-06-23T07:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561269600,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 89.29278564453125\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f2bdbe682842ecd991cb5\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561275355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 95.24675750732422,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 4252.3054555734825,\n \"wscore\": 3610018.7470779126,\n \"zscore\": -7.880607437567208,\n \"min\": 31933,\n \"max\": 45542,\n \"value\": 4391,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 95.2467563391641,\n \"percentile\": 0.9999999999999968,\n \"hourofday\": 6,\n \"pctofavg\": 11.585217041429486,\n \"avg\": 37901.75,\n \"pts\": 12,\n \"cv\": 0.11219285271982118\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T07:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561269600,\n \"key\": \"__total\",\n \"maxScore\": 95.24675750732422\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f2aafe682842ecd991cb2\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561275055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 123,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 629.1375,\n \"duration\": \"10m\",\n \"avg\": 37748.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T07:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561274155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f25ffe682842ecd991cb1\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561273855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 2521,\n \"cfgtype\": \"exceed\",\n \"cfgvalue\": \"250\",\n \"limit\": 1048.7847222222222,\n \"duration\": \"10m\",\n \"avg\": 2517.0833333333335,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T07:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561272955,\n \"key\": \"aws-cloudTrail\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f23a7e682842ecd991caf\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561273255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 9,\n \"datasum\": 372,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 631.6958333333333,\n \"duration\": \"10m\",\n \"avg\": 37901.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T07:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561272355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f23a7e682842ecd991cb0\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561273255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 2,\n \"datasum\": 98,\n \"cfgvalue\": \"250\",\n \"cfgtype\": \"exceed\",\n \"limit\": 93.70833333333334,\n \"duration\": \"10m\",\n \"avg\": 224.9,\n \"pts\": 10,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T07:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561272355,\n \"key\": \"office365\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f214fe682842ecd991cae\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561272655243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 96,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 631.6958333333333,\n \"duration\": \"10m\",\n \"avg\": 37901.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T06:50:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561271755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f1dcbe682842ecd991cab\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561271755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.999997615814209,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 87.12782287597656,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"std\": 211.34864560720516,\n \"zscore\": -4.719689578015417,\n \"wscore\": 86997.13060811294,\n \"max\": 1352,\n \"min\": 817,\n \"value\": 1,\n \"zpts\": 0,\n \"score\": 87.12782234162538,\n \"percentile\": 0.9999976379517832,\n \"hourofday\": 5,\n \"pctofavg\": 0.10015022533800699,\n \"avg\": 998.5,\n \"pts\": 6,\n \"cv\": 0.21166614482444182\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.999997615814209\n }\n ],\n \"createdOn\": \"2019-06-23T06:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561266000,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 87.12782287597656\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f1dcbe682842ecd991cac\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561271755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 91.50946044921875,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 6451.037097931532,\n \"wscore\": 3641329.1763276067,\n \"zscore\": -5.857791973549491,\n \"min\": 30297,\n \"max\": 54180,\n \"value\": 2003,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 91.50945988902932,\n \"percentile\": 0.9999999953093831,\n \"hourofday\": 5,\n \"pctofavg\": 5.033696193942643,\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"cv\": 0.16211962499670868\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T06:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561266000,\n \"key\": \"__total\",\n \"maxScore\": 91.50946044921875\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f1a47e682842ecd991caa\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561270855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 161,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 631.6958333333333,\n \"duration\": \"10m\",\n \"avg\": 37901.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T06:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561269955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f17efe682842ecd991ca9\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561270255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 189,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 663.1972222222223,\n \"duration\": \"10m\",\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T06:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561269355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f1597e682842ecd991ca8\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561269655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 349,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 663.1972222222223,\n \"duration\": \"10m\",\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T06:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561268755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f133fe682842ecd991ca7\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561269055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 210,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 663.1972222222223,\n \"duration\": \"10m\",\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T05:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561268155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f0fbbe682842ecd991ca4\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561268155243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9999999403953552,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 90.49468231201172,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 85879.45035872975,\n \"zscore\": -5.526217370743513,\n \"min\": 788,\n \"max\": 1268,\n \"value\": 1,\n \"zpts\": 0,\n \"std\": 171.54591222177228,\n \"score\": 90.49467898707034,\n \"percentile\": 0.9999999672791309,\n \"hourofday\": 4,\n \"pctofavg\": 0.10537407797681769,\n \"avg\": 949,\n \"pts\": 6,\n \"cv\": 0.18076492331061358\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9999999403953552\n }\n ],\n \"createdOn\": \"2019-06-23T05:35:55.243000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561262400,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 90.49468231201172\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f0fbbe682842ecd991ca5\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561268155243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 91.81258392333984,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 6611.535677952085,\n \"wscore\": 3782931.0598856313,\n \"zscore\": -5.968469644895407,\n \"min\": 32436,\n \"max\": 50150,\n \"value\": 1742,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 91.81258677844637,\n \"percentile\": 0.9999999976051082,\n \"hourofday\": 4,\n \"pctofavg\": 4.227873139535589,\n \"avg\": 41202.75,\n \"pts\": 12,\n \"cv\": 0.16046345639434467\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T05:35:55.243000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561262400,\n \"key\": \"__total\",\n \"maxScore\": 91.81258392333984\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f0c37e682842ecd991ca3\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561267255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 247,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 663.1972222222223,\n \"duration\": \"10m\",\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T05:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561266355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f09dfe682842ecd991ca2\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561266655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 209,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 686.7125000000001,\n \"duration\": \"10m\",\n \"avg\": 41202.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T05:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561265755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f0787e682842ecd991ca1\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561266055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 291,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 686.7125000000001,\n \"duration\": \"10m\",\n \"avg\": 41202.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T05:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561265155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f01abe682842ecd991c9f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561264555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.27510070800781,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 3907160.90449851,\n \"zscore\": -7.168652759655377,\n \"min\": 32884,\n \"max\": 50260,\n \"value\": 1560,\n \"zpts\": 0,\n \"std\": 5563.702321371385,\n \"score\": 94.27510220352667,\n \"percentile\": 0.9999999999992426,\n \"hourofday\": 3,\n \"pctofavg\": 3.7640927269766014,\n \"avg\": 41444.25,\n \"pts\": 12,\n \"cv\": 0.13424545796754397\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T04:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561258800,\n \"key\": \"__total\",\n \"maxScore\": 94.27510070800781\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f01abe682842ecd991ca0\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561264555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.0478515625,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 85897.03496779571,\n \"zscore\": -7.027681472927941,\n \"min\": 780,\n \"max\": 1116,\n \"value\": 1,\n \"zpts\": 0,\n \"std\": 129.8199608004186,\n \"score\": 94.0478485048858,\n \"percentile\": 0.9999999999979,\n \"hourofday\": 3,\n \"pctofavg\": 0.1094890510948905,\n \"avg\": 913.3333333333334,\n \"pts\": 6,\n \"cv\": 0.14213864321213715\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T04:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561258800,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 94.0478515625\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f007fe682842ecd991c9d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561264255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 303,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 686.7125000000001,\n \"duration\": \"10m\",\n \"avg\": 41202.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T04:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561263355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0f007fe682842ecd991c9e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561264255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 2,\n \"datasum\": 102,\n \"cfgtype\": \"exceed\",\n \"cfgvalue\": \"250\",\n \"limit\": 101.04166666666666,\n \"duration\": \"10m\",\n \"avg\": 242.5,\n \"pts\": 10,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T04:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561263355,\n \"key\": \"office365\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0efe27e682842ecd991c9c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561263655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 185,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 686.7125000000001,\n \"duration\": \"10m\",\n \"avg\": 41202.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T04:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561262755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ef977e682842ecd991c9b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561262455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 280,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 690.7375000000001,\n \"duration\": \"10m\",\n \"avg\": 41444.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T04:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561261555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ef71fe682842ecd991c9a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561261855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 198,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.7375000000001,\n \"duration\": \"10m\",\n \"avg\": 41444.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T03:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561260955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ef39be682842ecd991c98\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561260955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.63282012939453,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 121.77768907133834,\n \"wscore\": 85469.20997328541,\n \"zscore\": -7.408308316133099,\n \"min\": 808,\n \"max\": 1148,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 94.63282152421341,\n \"percentile\": 0.9999999999998721,\n \"hourofday\": 2,\n \"pctofavg\": 0.11072153533862336,\n \"avg\": 903.1666666666666,\n \"pts\": 6,\n \"cv\": 0.13483412703968076\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T03:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561255200,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 94.63282012939453\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ef39be682842ecd991c99\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561260955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 93.90423583984375,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 5709.290386923949,\n \"dayofweek\": 0,\n \"zscore\": -6.942660817787313,\n \"min\": 33900,\n \"max\": 52101,\n \"value\": 2085,\n \"zpts\": 0,\n \"score\": 93.904237373655,\n \"wscore\": 3917935.194528549,\n \"percentile\": 0.9999999999961522,\n \"hourofday\": 2,\n \"pctofavg\": 4.997283650773361,\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"cv\": 0.1368390575927701\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T03:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561255200,\n \"key\": \"__total\",\n \"maxScore\": 93.90423583984375\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ef26fe682842ecd991c97\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561260655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 87,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.7375000000001,\n \"duration\": \"10m\",\n \"avg\": 41444.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T03:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561259755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ef017e682842ecd991c96\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561260055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 363,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.7375000000001,\n \"duration\": \"10m\",\n \"avg\": 41444.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T03:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561259155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0eedbfe682842ecd991c95\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561259455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 258,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 695.3777777777777,\n \"duration\": \"10m\",\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T03:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561258555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0eeb67e682842ecd991c94\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561258855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 185,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 695.3777777777777,\n \"duration\": \"10m\",\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T03:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561257955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ee6b7e682842ecd991c93\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561257655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 173,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 695.3777777777777,\n \"duration\": \"10m\",\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T02:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561256755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ee58be682842ecd991c90\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561257355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9999980330467224,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 87.30805206298828,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 199.62833521878156,\n \"wscore\": 82957.1985233289,\n \"zscore\": -4.754669048491702,\n \"min\": 812,\n \"max\": 1370,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 87.3080496649664,\n \"percentile\": 0.9999980122823969,\n \"hourofday\": 1,\n \"pctofavg\": 0.10524469391334855,\n \"avg\": 950.1666666666666,\n \"pts\": 6,\n \"cv\": 0.21009823036532002\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9999980330467224\n }\n ],\n \"createdOn\": \"2019-06-23T02:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561251600,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 87.30805206298828\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ee58be682842ecd991c91\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561257355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 92.52783203125,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 6036.811900056739,\n \"wscore\": 3948301.450804632,\n \"zscore\": -6.255536966398616,\n \"min\": 32259,\n \"max\": 51241,\n \"value\": 4908,\n \"cv\": 0.14147175281058175,\n \"dayofweek\": 0,\n \"score\": 92.52783358458531,\n \"percentile\": 0.9999999996038496,\n \"hourofday\": 1,\n \"pctofavg\": 11.501822059219855,\n \"avg\": 42671.5,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T02:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561251600,\n \"key\": \"__total\",\n \"maxScore\": 92.52783203125\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ee58be682842ecd991c92\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561257355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.99825519323349,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 72.406005859375,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 0,\n \"wscore\": 125280.49743017054,\n \"zscore\": 3.130546146381053,\n \"min\": 1016,\n \"max\": 4807,\n \"value\": 4772,\n \"cv\": 0.56155790978291,\n \"std\": 971.6355734018799,\n \"score\": 72.40600920686059,\n \"percentile\": 0.9982551841620826,\n \"hourofday\": 1,\n \"pctofavg\": 275.79829504406877,\n \"avg\": 1730.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.99825519323349\n }\n ],\n \"createdOn\": \"2019-06-23T02:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561251600,\n \"key\": \"aws-cloudTrail\",\n \"maxScore\": 72.406005859375\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ee45fe682842ecd991c8f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561257055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 253,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 695.3777777777777,\n \"duration\": \"10m\",\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T02:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561256155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0edfafe682842ecd991c8e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561255855244\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 109,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 711.1916666666667,\n \"duration\": \"10m\",\n \"avg\": 42671.5,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T02:10:55.244000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561254955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0edaffe682842ecd991c8d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561254655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 274,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 711.1916666666667,\n \"duration\": \"10m\",\n \"avg\": 42671.5,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T01:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561253755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ed8a7e682842ecd991c8c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561254055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 1415,\n \"cfgvalue\": \"250\",\n \"cfgtype\": \"exceed\",\n \"limit\": 720.9375,\n \"duration\": \"10m\",\n \"avg\": 1730.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T01:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561253155,\n \"key\": \"aws-cloudTrail\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ed77be682842ecd991c8a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561253755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9732927083969116,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 50.49646759033203,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 364.207554640404,\n \"wscore\": 40801.14543315055,\n \"zscore\": -2.2157695240473028,\n \"min\": 1,\n \"max\": 1296,\n \"value\": 1,\n \"cv\": 0.45075192405990594,\n \"dayofweek\": 0,\n \"score\": 50.496467120235835,\n \"percentile\": 0.9732927093452167,\n \"hourofday\": 0,\n \"pctofavg\": 0.12376237623762376,\n \"avg\": 808,\n \"pts\": 7,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9732927083969116\n }\n ],\n \"createdOn\": \"2019-06-23T01:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561248000,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 50.49646759033203\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ed77be682842ecd991c8b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561253755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9981699585914612,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 72.18338775634766,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 11791.669189899438,\n \"wscore\": 2780204.3704986568,\n \"zscore\": -3.116509254289855,\n \"min\": 1652,\n \"max\": 48983,\n \"value\": 1767,\n \"zpts\": 0,\n \"dayofweek\": 0,\n \"score\": 72.1833906853174,\n \"percentile\": 0.9981699406355288,\n \"hourofday\": 0,\n \"pctofavg\": 4.587722136343483,\n \"avg\": 38515.846153846156,\n \"pts\": 13,\n \"cv\": 0.30615111356503155\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9981699585914612\n }\n ],\n \"createdOn\": \"2019-06-23T01:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561248000,\n \"key\": \"__total\",\n \"maxScore\": 72.18338775634766\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ed19fe682842ecd991c89\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561252255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 237,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 641.9307692307693,\n \"duration\": \"10m\",\n \"avg\": 38515.846153846156,\n \"pts\": 13,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T01:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561251355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ecf47e682842ecd991c88\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561251655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 317,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 641.9307692307693,\n \"duration\": \"10m\",\n \"avg\": 38515.846153846156,\n \"pts\": 13,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T01:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561250755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ec96be682842ecd991c86\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561250155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 93.3213119506836,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 3758337.0881428276,\n \"zscore\": -6.625983847777125,\n \"min\": 32591,\n \"max\": 52051,\n \"value\": 1561,\n \"zpts\": 0,\n \"std\": 5842.46569606722,\n \"score\": 93.3213148105826,\n \"percentile\": 0.9999999999655057,\n \"hourofday\": 23,\n \"pctofavg\": 3.87603796580429,\n \"avg\": 40273.083333333336,\n \"pts\": 12,\n \"cv\": 0.14507122903181124\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T00:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561244400,\n \"key\": \"__total\",\n \"maxScore\": 93.3213119506836\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ec96be682842ecd991c87\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561250155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.53155517578125,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 88712.50118672058,\n \"zscore\": -9.24588046313864,\n \"min\": 832,\n \"max\": 1094,\n \"value\": 1,\n \"cv\": 0.1080385869902408,\n \"std\": 99.2874614440313,\n \"score\": 96.53155733049029,\n \"percentile\": 1,\n \"hourofday\": 23,\n \"pctofavg\": 0.1088139281828074,\n \"avg\": 919,\n \"pts\": 5,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-23T00:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561244400,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 96.53155517578125\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ec83fe682842ecd991c85\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561249855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 176,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 641.9307692307693,\n \"duration\": \"10m\",\n \"avg\": 38515.846153846156,\n \"pts\": 13,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T00:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561248955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ec137e682842ecd991c84\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561248055271\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 181,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 671.2180555555557,\n \"duration\": \"10m\",\n \"avg\": 40273.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-23T00:00:55.271000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561247155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ebb5be682842ecd991c82\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561246555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.55249786376953,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 3822733.730122945,\n \"zscore\": -7.352457738323173,\n \"min\": 32521,\n \"max\": 48717,\n \"value\": 1465,\n \"cv\": 0.1310805640134232,\n \"std\": 5299.554432921696,\n \"score\": 94.55249488614065,\n \"percentile\": 0.9999999999998054,\n \"hourofday\": 22,\n \"pctofavg\": 3.623569277574064,\n \"avg\": 40429.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T23:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561240800,\n \"key\": \"__total\",\n \"maxScore\": 94.55249786376953\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ebb5be682842ecd991c83\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561246555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 99.25005340576172,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 41.03,\n \"dayofweek\": 6,\n \"zscore\": -19.975627589568607,\n \"wscore\": 81444.5921099443,\n \"max\": 837,\n \"min\": 801,\n \"value\": 1,\n \"cv\": 0.05,\n \"score\": 99.25005131604227,\n \"percentile\": 1,\n \"hourofday\": 22,\n \"pctofavg\": 0.12186205215695832,\n \"avg\": 820.6,\n \"pts\": 5,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T23:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561240800,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 99.25005340576172\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0eba2fe682842ecd991c81\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561246255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 104,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 671.2180555555557,\n \"duration\": \"10m\",\n \"avg\": 40273.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T23:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561245355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0eb57fe682842ecd991c80\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561245055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 128,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 673.8291666666668,\n \"duration\": \"10m\",\n \"avg\": 40429.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T23:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561244155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0eb327e682842ecd991c7f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561244455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 105,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 673.8291666666668,\n \"duration\": \"10m\",\n \"avg\": 40429.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T23:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561243555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0eb0cfe682842ecd991c7e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561243855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 69,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 673.8291666666668,\n \"duration\": \"10m\",\n \"avg\": 40429.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T22:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561242955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0eae77e682842ecd991c7d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561243255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 102,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 673.8291666666668,\n \"duration\": \"10m\",\n \"avg\": 40429.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T22:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561242355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ead4be682842ecd991c7b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561242955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 99.25006866455078,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 82099.65449639666,\n \"zscore\": -19.975822050290134,\n \"min\": 790,\n \"max\": 882,\n \"value\": 1,\n \"cv\": 0.05,\n \"std\": 41.36000000000001,\n \"score\": 99.25006588055689,\n \"percentile\": 1,\n \"hourofday\": 21,\n \"pctofavg\": 0.12088974854932301,\n \"avg\": 827.2,\n \"pts\": 5,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T22:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561237200,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 99.25006866455078\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ead4be682842ecd991c7c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561242955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 92.37174987792969,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 6423.289220463471,\n \"wscore\": 3827692.717767411,\n \"zscore\": -6.189495023827996,\n \"min\": 32818,\n \"max\": 49880,\n \"value\": 1681,\n \"cv\": 0.15500994589408182,\n \"dayofweek\": 6,\n \"score\": 92.3717461125759,\n \"percentile\": 0.9999999993964274,\n \"hourofday\": 21,\n \"pctofavg\": 4.056671124473359,\n \"avg\": 41437.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T22:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561237200,\n \"key\": \"__total\",\n \"maxScore\": 92.37174987792969\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ea76fe682842ecd991c7a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561241455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 428,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.6319444444443,\n \"duration\": \"10m\",\n \"avg\": 41437.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T22:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561240555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ea517e682842ecd991c79\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561240855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 251,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 690.6319444444443,\n \"duration\": \"10m\",\n \"avg\": 41437.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T22:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561239955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ea2bfe682842ecd991c78\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561240255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 153,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.6319444444443,\n \"duration\": \"10m\",\n \"avg\": 41437.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T21:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561239355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e9f3be682842ecd991c76\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561239355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 93.36884307861328,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 3798968.1008839733,\n \"zscore\": -6.650242178805493,\n \"min\": 33098,\n \"max\": 49455,\n \"value\": 1601,\n \"zpts\": 0,\n \"std\": 5877.492721177969,\n \"score\": 93.36884199504699,\n \"percentile\": 0.9999999999707389,\n \"hourofday\": 20,\n \"pctofavg\": 3.934845254407039,\n \"avg\": 40687.75,\n \"pts\": 12,\n \"cv\": 0.14445361862422887\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T21:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561233600,\n \"key\": \"__total\",\n \"maxScore\": 93.36884307861328\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e9f3be682842ecd991c77\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561239355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 98.91366577148438,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 50.5070292137639,\n \"dayofweek\": 6,\n \"zscore\": -16.58779011638418,\n \"avg\": 838.8,\n \"min\": 808,\n \"max\": 939,\n \"value\": 1,\n \"cv\": 0.06021343492341905,\n \"score\": 98.91366225085844,\n \"percentile\": 1,\n \"hourofday\": 20,\n \"pctofavg\": 0.11921793037672868,\n \"wscore\": 82968.77989602005,\n \"pts\": 5,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T21:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561233600,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 98.91366577148438\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e9bb7e682842ecd991c75\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561238455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 237,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.6319444444443,\n \"duration\": \"10m\",\n \"avg\": 41437.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T21:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561237555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e995fe682842ecd991c74\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561237855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 188,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 678.1291666666667,\n \"duration\": \"10m\",\n \"avg\": 40687.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T21:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561236955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e9707e682842ecd991c73\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561237255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 79,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 678.1291666666667,\n \"duration\": \"10m\",\n \"avg\": 40687.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T21:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561236355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e94afe682842ecd991c72\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561236655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 150,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 678.1291666666667,\n \"duration\": \"10m\",\n \"avg\": 40687.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T20:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561235755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e9257e682842ecd991c71\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561236055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 111,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 678.1291666666667,\n \"duration\": \"10m\",\n \"avg\": 40687.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T20:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561235155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e912be682842ecd991c6f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561235755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 97.5047607421875,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 80.3557091935601,\n \"wscore\": 85648.1844000425,\n \"zscore\": -10.918950362151952,\n \"min\": 822,\n \"max\": 1037,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 6,\n \"score\": 97.50476366125058,\n \"percentile\": 1,\n \"hourofday\": 19,\n \"pctofavg\": 0.11384335154826959,\n \"avg\": 878.4,\n \"pts\": 5,\n \"cv\": 0.0914796325063298\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T20:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561230000,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 97.5047607421875\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e912be682842ecd991c70\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561235755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 93.72478485107422,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 5695.424454965778,\n \"wscore\": 3789542.946565844,\n \"zscore\": -6.840520311475321,\n \"min\": 32843,\n \"max\": 49108,\n \"value\": 1473,\n \"cv\": 0.14086195456559328,\n \"dayofweek\": 6,\n \"score\": 93.72478391809868,\n \"percentile\": 0.9999999999921094,\n \"hourofday\": 19,\n \"pctofavg\": 3.6430938679945264,\n \"avg\": 40432.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T20:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561230000,\n \"key\": \"__total\",\n \"maxScore\": 93.72478485107422\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e8b4fe682842ecd991c6e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561234255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 102,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 673.8777777777777,\n \"duration\": \"10m\",\n \"avg\": 40432.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T20:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561233355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e88f7e682842ecd991c6d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561233655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 244,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 673.8777777777777,\n \"duration\": \"10m\",\n \"avg\": 40432.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T20:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561232755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e869fe682842ecd991c6c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561233055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 161,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 673.8777777777777,\n \"duration\": \"10m\",\n \"avg\": 40432.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T19:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561232155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e831be682842ecd991c6a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561232155243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 92.36497497558594,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 6444.669198367663,\n \"wscore\": 3815789.6325103766,\n \"zscore\": -6.18667647727087,\n \"min\": 34050,\n \"max\": 52981,\n \"value\": 1441,\n \"zpts\": 0,\n \"dayofweek\": 6,\n \"score\": 92.36497713567361,\n \"percentile\": 0.9999999993855411,\n \"hourofday\": 18,\n \"pctofavg\": 3.4880835913624946,\n \"avg\": 41312.083333333336,\n \"pts\": 12,\n \"cv\": 0.15599961750579824\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T19:35:55.243000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561226400,\n \"key\": \"__total\",\n \"maxScore\": 92.36497497558594\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e831be682842ecd991c6b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561232155243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.52833557128906,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 97.16995420396162,\n \"wscore\": 86778.97468428288,\n \"zscore\": -9.24153980884956,\n \"min\": 807,\n \"max\": 1058,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 6,\n \"score\": 96.52833668996983,\n \"percentile\": 1,\n \"hourofday\": 18,\n \"pctofavg\": 0.11123470522803114,\n \"avg\": 899,\n \"pts\": 5,\n \"cv\": 0.10808671212898957\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T19:35:55.243000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561226400,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 96.52833557128906\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e7d3fe682842ecd991c69\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561230655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 122,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 688.5347222222223,\n \"duration\": \"10m\",\n \"avg\": 41312.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T19:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561229755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e788fe682842ecd991c68\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561229455244\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 171,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 688.5347222222223,\n \"duration\": \"10m\",\n \"avg\": 41312.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T18:50:55.244000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561228555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e7637e682842ecd991c67\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561228855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 213,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 688.5347222222223,\n \"duration\": \"10m\",\n \"avg\": 41312.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T18:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561227955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e750be682842ecd991c65\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561228555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.9701156616211,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 90.76915775746737,\n \"wscore\": 87234.31490065223,\n \"zscore\": -9.899838471576809,\n \"min\": 799,\n \"max\": 1053,\n \"value\": 1,\n \"cv\": 0.1008994639367134,\n \"dayofweek\": 6,\n \"score\": 96.97011438489577,\n \"percentile\": 1,\n \"hourofday\": 17,\n \"pctofavg\": 0.11116051578479323,\n \"avg\": 899.6,\n \"pts\": 5,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T18:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561222800,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 96.9701156616211\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e750be682842ecd991c66\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561228555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9556733965873718,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 42.64897918701172,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 22884.71758786612,\n \"wscore\": 2027358.3741116673,\n \"zscore\": -2.010989058089481,\n \"min\": 34132,\n \"max\": 121306,\n \"value\": 1515,\n \"cv\": 0.4814195074503199,\n \"dayofweek\": 6,\n \"score\": 42.648980313727705,\n \"percentile\": 0.9556733875208911,\n \"hourofday\": 17,\n \"pctofavg\": 3.1870638166579304,\n \"avg\": 47535.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9556733965873718\n }\n ],\n \"createdOn\": \"2019-06-22T18:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561222800,\n \"key\": \"__total\",\n \"maxScore\": 42.64897918701172\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e7187e682842ecd991c64\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561227655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 159,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 688.5347222222223,\n \"duration\": \"10m\",\n \"avg\": 41312.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T18:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561226755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e6a7fe682842ecd991c63\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561225855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 206,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 792.2652777777778,\n \"duration\": \"10m\",\n \"avg\": 47535.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T17:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561224955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e6827e682842ecd991c62\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561225255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 207,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 792.2652777777778,\n \"duration\": \"10m\",\n \"avg\": 47535.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T17:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561224355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e66fbe682842ecd991c60\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561224955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 97.33153533935547,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"std\": 85.22581768454909,\n \"zscore\": -10.555486875229969,\n \"min\": 802,\n \"max\": 1044,\n \"value\": 1,\n \"zpts\": 0,\n \"score\": 97.33153807664473,\n \"wscore\": 87656.78319182625,\n \"percentile\": 1,\n \"hourofday\": 16,\n \"pctofavg\": 0.11103708638685321,\n \"avg\": 900.6,\n \"pts\": 5,\n \"cv\": 0.09463226480629479\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T17:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561219200,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 97.33153533935547\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e66fbe682842ecd991c61\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561224955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.27295684814453,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 5441.553896228131,\n \"dayofweek\": 6,\n \"zscore\": -7.167284825332838,\n \"avg\": 40625.166666666664,\n \"min\": 33090,\n \"max\": 51442,\n \"value\": 1624,\n \"cv\": 0.133945392541441,\n \"score\": 94.2729595288434,\n \"percentile\": 0.9999999999992351,\n \"hourofday\": 16,\n \"pctofavg\": 3.9975220614479534,\n \"wscore\": 3829854.6930191843,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T17:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561219200,\n \"key\": \"__total\",\n \"maxScore\": 94.27295684814453\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e611fe682842ecd991c5f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561223455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 103,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 677.0861111111111,\n \"duration\": \"10m\",\n \"avg\": 40625.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T17:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561222555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e5ec7e682842ecd991c5e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561222855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 260,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 677.0861111111111,\n \"duration\": \"10m\",\n \"avg\": 40625.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T17:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561221955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e58ebe682842ecd991c5c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561221355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.60404968261719,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 5100.706059513286,\n \"wscore\": 3740344.492681669,\n \"zscore\": -7.388160167168946,\n \"min\": 33962,\n \"max\": 48336,\n \"value\": 1852,\n \"cv\": 0.12901149711484108,\n \"dayofweek\": 6,\n \"score\": 94.60404836034758,\n \"percentile\": 0.9999999999998511,\n \"hourofday\": 15,\n \"pctofavg\": 4.684239590929976,\n \"avg\": 39536.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T16:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561215600,\n \"key\": \"__total\",\n \"maxScore\": 94.60404968261719\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e58ebe682842ecd991c5d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561221355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 98.78147888183594,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 55.04906902028408,\n \"wscore\": 85248.41335141125,\n \"zscore\": -15.658757093283022,\n \"min\": 797,\n \"max\": 957,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 6,\n \"score\": 98.78147549410342,\n \"percentile\": 1,\n \"hourofday\": 15,\n \"pctofavg\": 0.11587485515643105,\n \"avg\": 863,\n \"pts\": 5,\n \"cv\": 0.06378802899221794\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T16:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561215600,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 98.78147888183594\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e57bfe682842ecd991c5b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561221055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 208,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 677.0861111111111,\n \"duration\": \"10m\",\n \"avg\": 40625.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T16:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561220155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e5567e682842ecd991c5a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561220455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 204,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 677.0861111111111,\n \"duration\": \"10m\",\n \"avg\": 40625.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T16:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561219555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e4c07e682842ecd991c59\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561218055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 199,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 658.9472222222223,\n \"duration\": \"10m\",\n \"avg\": 39536.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T15:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561217155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e4adbe682842ecd991c57\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561217755243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9621515870094299,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 45.312538146972656,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 25410.920003213625,\n \"wscore\": 2466750.354314778,\n \"zscore\": -2.076492442094197,\n \"min\": 32723,\n \"max\": 107065,\n \"value\": 1673,\n \"cv\": 0.46678143418280765,\n \"dayofweek\": 6,\n \"score\": 45.312537602431696,\n \"percentile\": 0.9621515705804953,\n \"hourofday\": 14,\n \"pctofavg\": 3.0731879809510105,\n \"avg\": 54438.583333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9621515870094299\n }\n ],\n \"createdOn\": \"2019-06-22T15:35:55.243000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561212000,\n \"key\": \"__total\",\n \"maxScore\": 45.312538146972656\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e4adbe682842ecd991c58\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561217755243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 97.19183349609375,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 84.63001831501633,\n \"dayofweek\": 6,\n \"zscore\": -10.287129996349359,\n \"avg\": 871.6,\n \"min\": 817,\n \"max\": 1037,\n \"value\": 1,\n \"zpts\": 0,\n \"score\": 97.19183615055384,\n \"percentile\": 1,\n \"hourofday\": 14,\n \"pctofavg\": 0.11473152822395594,\n \"wscore\": 84712.40438882273,\n \"pts\": 5,\n \"cv\": 0.09709731334903204\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T15:35:55.243000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561212000,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 97.19183349609375\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e4757e682842ecd991c56\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561216855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 92,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 658.9472222222223,\n \"duration\": \"10m\",\n \"avg\": 39536.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T15:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561215955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e44ffe682842ecd991c55\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561216255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 130,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 907.3097222222223,\n \"duration\": \"10m\",\n \"avg\": 54438.583333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T15:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561215355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e404fe682842ecd991c54\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561215055243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 179,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 907.3097222222223,\n \"duration\": \"10m\",\n \"avg\": 54438.583333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T14:50:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561214155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e3df7e682842ecd991c53\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561214455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 237,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 907.3097222222223,\n \"duration\": \"10m\",\n \"avg\": 54438.583333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T14:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561213555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e3ccbe682842ecd991c51\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561214155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.57593536376953,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 3740864.5213514976,\n \"zscore\": -7.368629948606815,\n \"min\": 32667,\n \"max\": 48943,\n \"value\": 1666,\n \"cv\": 0.12999437636319422,\n \"std\": 5141.808395534482,\n \"score\": 94.57593770600585,\n \"percentile\": 0.9999999999998276,\n \"hourofday\": 13,\n \"pctofavg\": 4.2119545179701205,\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T14:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561208400,\n \"key\": \"__total\",\n \"maxScore\": 94.57593536376953\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e3ccbe682842ecd991c52\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561214155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.09537506103516,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 99.63653948226022,\n \"wscore\": 83468.4443713087,\n \"zscore\": -8.707648865650054,\n \"min\": 803,\n \"max\": 1067,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 6,\n \"score\": 96.09537689535884,\n \"percentile\": 1,\n \"hourofday\": 13,\n \"pctofavg\": 0.11512779184895235,\n \"avg\": 868.6,\n \"pts\": 5,\n \"cv\": 0.11470934778063575\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T14:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561208400,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 96.09537506103516\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e3947e682842ecd991c50\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561213255241\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 168,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 907.3097222222223,\n \"duration\": \"10m\",\n \"avg\": 54438.583333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T14:20:55.241000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561212355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e36efe682842ecd991c4f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561212655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 87,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 659.2347222222223,\n \"duration\": \"10m\",\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T14:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561211755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e3497e682842ecd991c4e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561212055245\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 254,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 659.2347222222223,\n \"duration\": \"10m\",\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T14:00:55.245000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561211155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e2ebbe682842ecd991c4c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561210555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 92.97990417480469,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 143.61420542550798,\n \"dayofweek\": 6,\n \"zscore\": -6.458971083338562,\n \"avg\": 928.6,\n \"min\": 799,\n \"max\": 1200,\n \"value\": 1,\n \"zpts\": 0,\n \"score\": 92.97990767521041,\n \"percentile\": 0.9999999998945828,\n \"hourofday\": 12,\n \"pctofavg\": 0.10768899418479431,\n \"wscore\": 86341.1422672004,\n \"pts\": 5,\n \"cv\": 0.15465669332921383\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T13:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561204800,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 92.97990417480469\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e2ebbe682842ecd991c4d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561210555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 93.80207824707031,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"std\": 5401.846888385078,\n \"zscore\": -6.883972729146298,\n \"wscore\": 3637566.308464392,\n \"max\": 47412,\n \"min\": 31779,\n \"value\": 1593,\n \"zpts\": 0,\n \"score\": 93.80207521558549,\n \"percentile\": 0.9999999999941794,\n \"hourofday\": 12,\n \"pctofavg\": 4.107875792414313,\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"cv\": 0.13929765264987845\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T13:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561204800,\n \"key\": \"__total\",\n \"maxScore\": 93.80207824707031\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e2d8fe682842ecd991c4b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561210255243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 345,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 659.2347222222223,\n \"duration\": \"10m\",\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T13:30:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561209355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e2b37e682842ecd991c4a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561209655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 260,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 659.2347222222223,\n \"duration\": \"10m\",\n \"avg\": 39554.083333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T13:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561208755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e2687e682842ecd991c49\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561208455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 65,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 646.3194444444443,\n \"duration\": \"10m\",\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T13:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561207555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e242fe682842ecd991c48\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561207855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 88,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 646.3194444444443,\n \"duration\": \"10m\",\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T12:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561206955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e21d7e682842ecd991c47\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561207255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 261,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 646.3194444444443,\n \"duration\": \"10m\",\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T12:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561206355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e20abe682842ecd991c45\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561206955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.59475708007812,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 3657876.85210851,\n \"zscore\": -7.381689516423917,\n \"min\": 32695,\n \"max\": 47509,\n \"value\": 1542,\n \"zpts\": 0,\n \"std\": 5029.596081501531,\n \"score\": 94.59475898019323,\n \"percentile\": 0.9999999999998437,\n \"hourofday\": 11,\n \"pctofavg\": 3.987698991653503,\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"cv\": 0.1300681921052404\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T12:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561201200,\n \"key\": \"__total\",\n \"maxScore\": 94.59475708007812\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e20abe682842ecd991c46\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561206955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9890018105506897,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 60.40700912475586,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 312.1940724755819,\n \"wscore\": 48013.503139953486,\n \"zscore\": -2.5427559435659135,\n \"min\": 134,\n \"max\": 1086,\n \"value\": 1,\n \"cv\": 0.39277929017686963,\n \"dayofweek\": 6,\n \"score\": 60.407007515143825,\n \"percentile\": 0.9890017980534166,\n \"hourofday\": 11,\n \"pctofavg\": 0.12581253931641853,\n \"avg\": 794.8333333333334,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9890018105506897\n }\n ],\n \"createdOn\": \"2019-06-22T12:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561201200,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 60.40700912475586\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e1f7fe682842ecd991c44\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561206655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 130,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 646.3194444444443,\n \"duration\": \"10m\",\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T12:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561205755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e1d27e682842ecd991c43\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561206055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 95,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 646.3194444444443,\n \"duration\": \"10m\",\n \"avg\": 38779.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T12:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561205155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e1acfe682842ecd991c42\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561205455243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 118,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T12:10:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561204555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e1877e682842ecd991c41\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561204855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 176,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T12:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561203955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e13c7e682842ecd991c40\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561203655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 106,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T11:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561202755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e129be682842ecd991c3e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561203355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.73918914794922,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"std\": 118.44935626671848,\n \"zscore\": -7.4842112100957525,\n \"avg\": 887.5,\n \"min\": 792,\n \"max\": 1145,\n \"value\": 1,\n \"cv\": 0.13346406339911943,\n \"score\": 94.73918881665884,\n \"percentile\": 0.9999999999999281,\n \"hourofday\": 10,\n \"pctofavg\": 0.11267605633802817,\n \"wscore\": 84081.03007478472,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T11:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561197600,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 94.73918914794922\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e129be682842ecd991c3f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561203355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 95.95832824707031,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 4206.631134292618,\n \"wscore\": 3622906.8012844543,\n \"zscore\": -8.556728377386689,\n \"min\": 31549,\n \"max\": 46132,\n \"value\": 1760,\n \"zpts\": 0,\n \"dayofweek\": 6,\n \"score\": 95.95833138086225,\n \"percentile\": 1,\n \"hourofday\": 10,\n \"pctofavg\": 4.661634220633029,\n \"avg\": 37755,\n \"pts\": 12,\n \"cv\": 0.1114191798249932\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T11:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561197600,\n \"key\": \"__total\",\n \"maxScore\": 95.95832824707031\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e116fe682842ecd991c3d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561203055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 242,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T11:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561202155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e0f17e682842ecd991c3c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561202455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 155,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 644.4819444444444,\n \"duration\": \"10m\",\n \"avg\": 38668.916666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T11:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561201555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e0cbfe682842ecd991c3b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561201855243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 170,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 629.25,\n \"duration\": \"10m\",\n \"avg\": 37755,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T11:10:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561200955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e0a67e682842ecd991c3a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561201255243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 227,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 629.25,\n \"duration\": \"10m\",\n \"avg\": 37755,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T11:00:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561200355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e080fe682842ecd991c39\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561200655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 119,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 629.25,\n \"duration\": \"10m\",\n \"avg\": 37755,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T10:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561199755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e05b7e682842ecd991c38\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561200055245\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 197,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 629.25,\n \"duration\": \"10m\",\n \"avg\": 37755,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T10:40:55.245000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561199155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e048be682842ecd991c36\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561199755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.36714935302734,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"std\": 97.17624309584221,\n \"zscore\": -9.031699916625183,\n \"avg\": 878.6666666666666,\n \"min\": 810,\n \"max\": 1091,\n \"value\": 1,\n \"cv\": 0.11059511733214213,\n \"score\": 96.36715148422034,\n \"percentile\": 1,\n \"hourofday\": 9,\n \"pctofavg\": 0.11380880121396054,\n \"wscore\": 84674.60377080161,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T10:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561194000,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 96.36714935302734\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e048be682842ecd991c37\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561199755240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 97.18183135986328,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 3639087.193422762,\n \"zscore\": -10.268685350044729,\n \"min\": 31621,\n \"max\": 44322,\n \"value\": 1891,\n \"zpts\": 0,\n \"std\": 3462.4847733319425,\n \"score\": 97.18183508119021,\n \"percentile\": 1,\n \"hourofday\": 9,\n \"pctofavg\": 5.049916101781669,\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"cv\": 0.09246566689065483\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T10:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561194000,\n \"key\": \"__total\",\n \"maxScore\": 97.18183135986328\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0e035fe682842ecd991c35\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561199455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 204,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 629.25,\n \"duration\": \"10m\",\n \"avg\": 37755,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T10:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561198555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dfeafe682842ecd991c34\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561198255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 361,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 624.1027777777778,\n \"duration\": \"10m\",\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T10:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561197355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dfc57e682842ecd991c33\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561197655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 305,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 624.1027777777778,\n \"duration\": \"10m\",\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T10:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561196755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0df9ffe682842ecd991c32\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561197055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 256,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 624.1027777777778,\n \"duration\": \"10m\",\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T09:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561196155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0df67be682842ecd991c30\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561196155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.7033462524414,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 92.71057113404059,\n \"wscore\": 85147.29645619715,\n \"zscore\": -9.486512586880975,\n \"min\": 789,\n \"max\": 1074,\n \"value\": 1,\n \"cv\": 0.10529309612043225,\n \"dayofweek\": 6,\n \"score\": 96.70334634434656,\n \"percentile\": 1,\n \"hourofday\": 8,\n \"pctofavg\": 0.1135718341851221,\n \"avg\": 880.5,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T09:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561190400,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 96.7033462524414\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0df67be682842ecd991c31\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561196155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 96.82388305664062,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 3636.0572472879953,\n \"dayofweek\": 6,\n \"zscore\": -9.6668353318373,\n \"avg\": 36626.166666666664,\n \"min\": 31307,\n \"max\": 42061,\n \"value\": 1477,\n \"cv\": 0.09927485123899568,\n \"score\": 96.82388027883303,\n \"percentile\": 1,\n \"hourofday\": 8,\n \"pctofavg\": 4.032636047998471,\n \"wscore\": 3546287.576405918,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T09:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561190400,\n \"key\": \"__total\",\n \"maxScore\": 96.82388305664062\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0df54fe682842ecd991c2f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561195855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 184,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 624.1027777777778,\n \"duration\": \"10m\",\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T09:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561194955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0df2f7e682842ecd991c2e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561195255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 178,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 624.1027777777778,\n \"duration\": \"10m\",\n \"avg\": 37446.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T09:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561194355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dee47e682842ecd991c2d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561194055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 184,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 610.436111111111,\n \"duration\": \"10m\",\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T09:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561193155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0debefe682842ecd991c2c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561193455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 240,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 610.436111111111,\n \"duration\": \"10m\",\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T08:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561192555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0de997e682842ecd991c2b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561192855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 102,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 610.436111111111,\n \"duration\": \"10m\",\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T08:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561191955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0de86be682842ecd991c29\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561192555239\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.00038146972656,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 131.9904247368809,\n \"wscore\": 86934.68624460351,\n \"zscore\": -6.999245098081686,\n \"min\": 786,\n \"max\": 1108,\n \"value\": 1,\n \"cv\": 0.1427180660337512,\n \"dayofweek\": 6,\n \"score\": 94.00038159445324,\n \"percentile\": 0.9999999999974265,\n \"hourofday\": 7,\n \"pctofavg\": 0.10812759055685708,\n \"avg\": 924.8333333333334,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T08:35:55.239000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561186800,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 94.00038146972656\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0de86be682842ecd991c2a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561192555239\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.25731658935547,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"std\": 5056.115045582593,\n \"zscore\": -7.15732329540579,\n \"avg\": 37748.25,\n \"min\": 31022,\n \"max\": 48302,\n \"value\": 1560,\n \"zpts\": 0,\n \"score\": 94.2573201249498,\n \"percentile\": 0.9999999999991773,\n \"hourofday\": 7,\n \"pctofavg\": 4.132641910552145,\n \"wscore\": 3558048.8844066365,\n \"pts\": 12,\n \"cv\": 0.13394303167915314\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T08:35:55.239000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561186800,\n \"key\": \"__total\",\n \"maxScore\": 94.25731658935547\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0de73fe682842ecd991c28\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561192255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 174,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 610.436111111111,\n \"duration\": \"10m\",\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T08:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561191355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0de4e7e682842ecd991c27\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561191655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 175,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 610.436111111111,\n \"duration\": \"10m\",\n \"avg\": 36626.166666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T08:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561190755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ddddfe682842ecd991c26\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561189855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 152,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 629.1375,\n \"duration\": \"10m\",\n \"avg\": 37748.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T07:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561188955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0ddb87e682842ecd991c25\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561189255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 233,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 629.1375,\n \"duration\": \"10m\",\n \"avg\": 37748.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T07:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561188355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dda5be682842ecd991c23\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561188955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9999998211860657,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 89.29278564453125,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 187.5337006750757,\n \"dayofweek\": 6,\n \"zscore\": -5.195510619296534,\n \"avg\": 975.3333333333334,\n \"min\": 808,\n \"max\": 1285,\n \"value\": 1,\n \"cv\": 0.19227652153972216,\n \"score\": 89.29278532025874,\n \"percentile\": 0.999999795841319,\n \"hourofday\": 6,\n \"pctofavg\": 0.10252904989747096,\n \"wscore\": 87090.2299490257,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9999998211860657\n }\n ],\n \"createdOn\": \"2019-06-22T07:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561183200,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 89.29278564453125\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dda5be682842ecd991c24\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561188955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 95.94029235839844,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 3636304.836002499,\n \"zscore\": -8.537427609396403,\n \"min\": 31933,\n \"max\": 45542,\n \"value\": 1598,\n \"zpts\": 0,\n \"std\": 4252.3054555734825,\n \"score\": 95.94028866747574,\n \"percentile\": 1,\n \"hourofday\": 6,\n \"pctofavg\": 4.216164161285429,\n \"avg\": 37901.75,\n \"pts\": 12,\n \"cv\": 0.11219285271982118\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T07:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561183200,\n \"key\": \"__total\",\n \"maxScore\": 95.94029235839844\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dd92fe682842ecd991c22\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561188655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 100,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 629.1375,\n \"duration\": \"10m\",\n \"avg\": 37748.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T07:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561187755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dd227e682842ecd991c21\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561186855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 258,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 631.6958333333333,\n \"duration\": \"10m\",\n \"avg\": 37901.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T07:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561185955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dcfcfe682842ecd991c20\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561186255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 362,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 631.6958333333333,\n \"duration\": \"10m\",\n \"avg\": 37901.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T06:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561185355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dcc4be682842ecd991c1e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561185355239\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.999997615814209,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 87.12782287597656,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 86997.13060811294,\n \"zscore\": -4.719689578015417,\n \"min\": 817,\n \"max\": 1352,\n \"value\": 1,\n \"zpts\": 0,\n \"std\": 211.34864560720516,\n \"score\": 87.12782234162538,\n \"percentile\": 0.9999976379517832,\n \"hourofday\": 5,\n \"pctofavg\": 0.10015022533800699,\n \"avg\": 998.5,\n \"pts\": 6,\n \"cv\": 0.21166614482444182\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.999997615814209\n }\n ],\n \"createdOn\": \"2019-06-22T06:35:55.239000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561179600,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 87.12782287597656\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dcc4be682842ecd991c1f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561185355239\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 91.71167755126953,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 6451.037097931532,\n \"dayofweek\": 6,\n \"zscore\": -5.930958503649178,\n \"wscore\": 3649375.695727152,\n \"max\": 54180,\n \"min\": 30297,\n \"value\": 1531,\n \"cv\": 0.16211962499670868,\n \"score\": 91.71167523638816,\n \"percentile\": 0.9999999969882867,\n \"hourofday\": 5,\n \"pctofavg\": 3.84752315173549,\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T06:35:55.239000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561179600,\n \"key\": \"__total\",\n \"maxScore\": 91.71167755126953\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dc8c7e682842ecd991c1d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561184455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 158,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 631.6958333333333,\n \"duration\": \"10m\",\n \"avg\": 37901.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T06:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561183555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dc66fe682842ecd991c1c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561183855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 393,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 663.1972222222223,\n \"duration\": \"10m\",\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T06:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561182955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dc417e682842ecd991c1b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561183255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 182,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 663.1972222222223,\n \"duration\": \"10m\",\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T06:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561182355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dbf67e682842ecd991c1a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561182055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 125,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 663.1972222222223,\n \"duration\": \"10m\",\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T05:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561181155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dbe3be682842ecd991c18\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561181755239\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 91.86235809326172,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 6611.535677952085,\n \"wscore\": 3784981.8022930976,\n \"zscore\": -5.987224742960372,\n \"min\": 32436,\n \"max\": 50150,\n \"value\": 1618,\n \"cv\": 0.16046345639434467,\n \"dayofweek\": 6,\n \"score\": 91.86235875743968,\n \"percentile\": 0.9999999978654825,\n \"hourofday\": 4,\n \"pctofavg\": 3.9269223534836875,\n \"avg\": 41202.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T05:35:55.239000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561176000,\n \"key\": \"__total\",\n \"maxScore\": 91.86235809326172\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dbe3be682842ecd991c19\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561181755239\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9999999403953552,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 90.49468231201172,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"std\": 171.54591222177228,\n \"zscore\": -5.526217370743513,\n \"avg\": 949,\n \"min\": 788,\n \"max\": 1268,\n \"value\": 1,\n \"cv\": 0.18076492331061358,\n \"score\": 90.49467898707034,\n \"percentile\": 0.9999999672791309,\n \"hourofday\": 4,\n \"pctofavg\": 0.10537407797681769,\n \"wscore\": 85879.45035872975,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9999999403953552\n }\n ],\n \"createdOn\": \"2019-06-22T05:35:55.239000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561176000,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 90.49468231201172\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0dbd0fe682842ecd991c17\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561181455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 152,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 663.1972222222223,\n \"duration\": \"10m\",\n \"avg\": 39791.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T05:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561180555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0db607e682842ecd991c16\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561179655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 238,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 686.7125000000001,\n \"duration\": \"10m\",\n \"avg\": 41202.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T05:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561178755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0db3afe682842ecd991c15\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561179055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 307,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 686.7125000000001,\n \"duration\": \"10m\",\n \"avg\": 41202.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T04:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561178155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0db02be682842ecd991c12\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561178155243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 93.05158996582031,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 5563.702321371385,\n \"dayofweek\": 6,\n \"zscore\": -6.493023514438415,\n \"min\": 32884,\n \"max\": 50260,\n \"value\": 5319,\n \"zpts\": 0,\n \"score\": 93.05159181022435,\n \"wscore\": 3856453.4338808907,\n \"percentile\": 0.9999999999158694,\n \"hourofday\": 3,\n \"pctofavg\": 12.834108471018297,\n \"avg\": 41444.25,\n \"pts\": 12,\n \"cv\": 0.13424545796754397\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T04:35:55.243000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561172400,\n \"key\": \"__total\",\n \"maxScore\": 93.05158996582031\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0db02be682842ecd991c13\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561178155243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9762564301490784,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 52.05533981323242,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 1289.9925064381835,\n \"dayofweek\": 6,\n \"zscore\": 2.2612534456143236,\n \"avg\": 2233,\n \"min\": 1424,\n \"max\": 5552,\n \"value\": 5150,\n \"zpts\": 0,\n \"score\": 52.05534152726866,\n \"percentile\": 0.9762564327387633,\n \"hourofday\": 3,\n \"pctofavg\": 230.63143752798925,\n \"wscore\": 116239.57763039092,\n \"pts\": 12,\n \"cv\": 0.5776948080780042\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9762564301490784\n }\n ],\n \"createdOn\": \"2019-06-22T04:35:55.243000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561172400,\n \"key\": \"aws-cloudTrail\",\n \"maxScore\": 52.05533981323242\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0db02be682842ecd991c14\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561178155243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.0478515625,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 129.8199608004186,\n \"wscore\": 85897.03496779571,\n \"zscore\": -7.027681472927941,\n \"min\": 780,\n \"max\": 1116,\n \"value\": 1,\n \"cv\": 0.14213864321213715,\n \"dayofweek\": 6,\n \"score\": 94.0478485048858,\n \"percentile\": 0.9999999999979,\n \"hourofday\": 3,\n \"pctofavg\": 0.1094890510948905,\n \"avg\": 913.3333333333334,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T04:35:55.243000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561172400,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 94.0478515625\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0daca7e682842ecd991c11\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561177255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 220,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 686.7125000000001,\n \"duration\": \"10m\",\n \"avg\": 41202.75,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T04:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561176355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0daa4fe682842ecd991c10\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561176655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 3815,\n \"cfgtype\": \"exceed\",\n \"cfgvalue\": \"250\",\n \"limit\": 930.4166666666667,\n \"duration\": \"10m\",\n \"avg\": 2233,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T04:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561175755,\n \"key\": \"aws-cloudTrail\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0da7f7e682842ecd991c0f\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561176055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 181,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.7375000000001,\n \"duration\": \"10m\",\n \"avg\": 41444.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T04:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561175155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0da59fe682842ecd991c0e\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561175455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 125,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.7375000000001,\n \"duration\": \"10m\",\n \"avg\": 41444.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T03:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561174555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0da347e682842ecd991c0d\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561174855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 255,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 690.7375000000001,\n \"duration\": \"10m\",\n \"avg\": 41444.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T03:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561173955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0da21be682842ecd991c0b\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561174555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.0238265991211,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 5709.290386923949,\n \"wscore\": 3922924.711432378,\n \"zscore\": -7.013247523435179,\n \"min\": 33900,\n \"max\": 52101,\n \"value\": 1682,\n \"cv\": 0.1368390575927701,\n \"dayofweek\": 6,\n \"score\": 94.02382505350516,\n \"percentile\": 0.9999999999976715,\n \"hourofday\": 2,\n \"pctofavg\": 4.031381822830117,\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T03:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561168800,\n \"key\": \"__total\",\n \"maxScore\": 94.0238265991211\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0da21be682842ecd991c0c\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561174555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.63282012939453,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 85469.20997328541,\n \"zscore\": -7.408308316133099,\n \"min\": 808,\n \"max\": 1148,\n \"value\": 1,\n \"zpts\": 0,\n \"std\": 121.77768907133834,\n \"score\": 94.63282152421341,\n \"percentile\": 0.9999999999998721,\n \"hourofday\": 2,\n \"pctofavg\": 0.11072153533862336,\n \"avg\": 903.1666666666666,\n \"pts\": 6,\n \"cv\": 0.13483412703968076\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T03:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561168800,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 94.63282012939453\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0da0efe682842ecd991c0a\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561174255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 121,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.7375000000001,\n \"duration\": \"10m\",\n \"avg\": 41444.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T03:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561173355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d9e97e682842ecd991c09\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561173655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 8,\n \"datasum\": 282,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 690.7375000000001,\n \"duration\": \"10m\",\n \"avg\": 41444.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T03:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561172755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d9c3fe682842ecd991c08\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561173055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 166,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 695.3777777777777,\n \"duration\": \"10m\",\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T03:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561172155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d99e7e682842ecd991c07\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561172455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 9,\n \"datasum\": 254,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 695.3777777777777,\n \"duration\": \"10m\",\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T03:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561171555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d9537e682842ecd991c06\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561171255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 132,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 695.3777777777777,\n \"duration\": \"10m\",\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T02:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561170355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d940be682842ecd991c03\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561170955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9944704174995422,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 65.87039947509766,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"std\": 971.6355734018799,\n \"zscore\": 2.7744455573622826,\n \"min\": 1016,\n \"max\": 4807,\n \"value\": 4426,\n \"cv\": 0.56155790978291,\n \"score\": 65.87039852377767,\n \"wscore\": 113972.25704576631,\n \"percentile\": 0.9944704111601678,\n \"hourofday\": 1,\n \"pctofavg\": 255.8011847998844,\n \"avg\": 1730.25,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9944704174995422\n }\n ],\n \"createdOn\": \"2019-06-22T02:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561165200,\n \"key\": \"aws-cloudTrail\",\n \"maxScore\": 65.87039947509766\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d940be682842ecd991c04\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561170955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9999980330467224,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 87.30805206298828,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 6,\n \"wscore\": 82957.1985233289,\n \"zscore\": -4.754669048491702,\n \"min\": 812,\n \"max\": 1370,\n \"value\": 1,\n \"zpts\": 0,\n \"std\": 199.62833521878156,\n \"score\": 87.3080496649664,\n \"percentile\": 0.9999980122823969,\n \"hourofday\": 1,\n \"pctofavg\": 0.10524469391334855,\n \"avg\": 950.1666666666666,\n \"pts\": 6,\n \"cv\": 0.21009823036532002\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9999980330467224\n }\n ],\n \"createdOn\": \"2019-06-22T02:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561165200,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 87.30805206298828\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d940be682842ecd991c05\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561170955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 92.65121459960938,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 6036.811900056739,\n \"wscore\": 3953566.2186279115,\n \"zscore\": -6.309207679577033,\n \"min\": 32259,\n \"max\": 51241,\n \"value\": 4584,\n \"zpts\": 0,\n \"dayofweek\": 6,\n \"score\": 92.65121260391389,\n \"percentile\": 0.9999999997195325,\n \"hourofday\": 1,\n \"pctofavg\": 10.74253307242539,\n \"avg\": 42671.5,\n \"pts\": 12,\n \"cv\": 0.14147175281058175\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T02:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561165200,\n \"key\": \"__total\",\n \"maxScore\": 92.65121459960938\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d92dfe682842ecd991c02\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561170655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 7,\n \"datasum\": 354,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 695.3777777777777,\n \"duration\": \"10m\",\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T02:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561169755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d9087e682842ecd991c01\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561170055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 119,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 695.3777777777777,\n \"duration\": \"10m\",\n \"avg\": 41722.666666666664,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T02:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561169155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d8e2fe682842ecd991c00\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561169455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 191,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 711.1916666666667,\n \"duration\": \"10m\",\n \"avg\": 42671.5,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T02:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561168555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d8bd7e682842ecd991bff\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561168855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 199,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 711.1916666666667,\n \"duration\": \"10m\",\n \"avg\": 42671.5,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T02:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561167955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d8727e682842ecd991bfe\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561167655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 405,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 711.1916666666667,\n \"duration\": \"10m\",\n \"avg\": 42671.5,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T01:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561166755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d85fbe682842ecd991bfc\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561167355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 94.83447265625,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 5286.591479604058,\n \"wscore\": 3943960.2850244176,\n \"zscore\": -7.554174270398581,\n \"min\": 32289,\n \"max\": 48983,\n \"value\": 1652,\n \"cv\": 0.12711870409865203,\n \"dayofweek\": 6,\n \"score\": 94.83447366475974,\n \"percentile\": 0.9999999999999578,\n \"hourofday\": 0,\n \"pctofavg\": 3.972315621155226,\n \"avg\": 41587.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T01:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561161600,\n \"key\": \"__total\",\n \"maxScore\": 94.83447265625\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d85fbe682842ecd991bfd\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561167355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 1,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 90.78076934814453,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 167.6998807393732,\n \"wscore\": 85560.87796699666,\n \"zscore\": -5.6141960021021715,\n \"min\": 804,\n \"max\": 1296,\n \"value\": 1,\n \"cv\": 0.17793090794628458,\n \"dayofweek\": 6,\n \"score\": 90.7807723787763,\n \"percentile\": 0.9999999802521727,\n \"hourofday\": 0,\n \"pctofavg\": 0.10610079575596816,\n \"avg\": 942.5,\n \"pts\": 6,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 1\n }\n ],\n \"createdOn\": \"2019-06-22T01:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561161600,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 90.78076934814453\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d84cfe682842ecd991bfb\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561167055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 179,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 711.1916666666667,\n \"duration\": \"10m\",\n \"avg\": 42671.5,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T01:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561166155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d8277e682842ecd991bfa\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561166455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 159,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 711.1916666666667,\n \"duration\": \"10m\",\n \"avg\": 42671.5,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T01:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561165555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d801fe682842ecd991bf9\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561165855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 231,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 693.1305555555557,\n \"duration\": \"10m\",\n \"avg\": 41587.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T01:10:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561164955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d7dc7e682842ecd991bf8\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561165255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 3,\n \"datasum\": 59,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 693.1305555555557,\n \"duration\": \"10m\",\n \"avg\": 41587.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T01:00:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561164355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d7b6fe682842ecd991bf7\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561164655242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 142,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 693.1305555555557,\n \"duration\": \"10m\",\n \"avg\": 41587.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T00:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561163755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d7917e682842ecd991bf6\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561164055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 272,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 693.1305555555557,\n \"duration\": \"10m\",\n \"avg\": 41587.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T00:40:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561163155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d77ebe682842ecd991bf4\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561163755257\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9988861680030823,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 74.34552001953125,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 251.44025946859156,\n \"dayofweek\": 5,\n \"zscore\": -3.260075723142815,\n \"avg\": 820.7142857142857,\n \"min\": 1,\n \"max\": 1235,\n \"value\": 1,\n \"cv\": 0.30636759204180003,\n \"score\": 74.34551956779327,\n \"percentile\": 0.9988861752757197,\n \"hourofday\": 23,\n \"pctofavg\": 0.12184508268059183,\n \"wscore\": 61016.42998813891,\n \"pts\": 14,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9988861680030823\n }\n ],\n \"createdOn\": \"2019-06-22T00:35:55.257000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561158000,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 74.34552001953125\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d77ebe682842ecd991bf5\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561163755257\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9996143579483032,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 78.031005859375,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 5,\n \"wscore\": 2988861.8896454475,\n \"zscore\": -3.549725044201838,\n \"min\": 13224,\n \"max\": 52494,\n \"value\": 1458,\n \"zpts\": 0,\n \"std\": 10379.822294039095,\n \"score\": 78.03100780235359,\n \"percentile\": 0.9996143663015312,\n \"hourofday\": 23,\n \"pctofavg\": 3.8064391589979873,\n \"avg\": 38303.51515151515,\n \"pts\": 33,\n \"cv\": 0.27098876573025193\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9996143579483032\n }\n ],\n \"createdOn\": \"2019-06-22T00:35:55.257000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561158000,\n \"key\": \"__total\",\n \"maxScore\": 78.031005859375\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d76bfe682842ecd991bf3\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561163455242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 119,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 693.1305555555557,\n \"duration\": \"10m\",\n \"avg\": 41587.833333333336,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T00:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561162555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d6fb7e682842ecd991bf2\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561161655267\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 6,\n \"datasum\": 228,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 638.3919191919192,\n \"duration\": \"10m\",\n \"avg\": 38303.51515151515,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-22T00:00:55.267000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561160755,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d6d5fe682842ecd991bf1\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561161055242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 252,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 657.6979797979798,\n \"duration\": \"10m\",\n \"avg\": 39461.878787878784,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-21T23:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561160155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d6b07e682842ecd991bf0\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561160455243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 196,\n \"cfgvalue\": \"10\",\n \"cfgtype\": \"below\",\n \"limit\": 657.6979797979798,\n \"duration\": \"10m\",\n \"avg\": 39461.878787878784,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-21T23:40:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561159555,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d69dbe682842ecd991bed\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561160155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9991388320922852,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 75.34381103515625,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 248.62385530872018,\n \"wscore\": 62497.691448297606,\n \"zscore\": -3.332343145315796,\n \"min\": 98,\n \"max\": 1379,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 5,\n \"score\": 75.3438112697982,\n \"percentile\": 0.9991388199956532,\n \"hourofday\": 22,\n \"pctofavg\": 0.12055455093429776,\n \"avg\": 829.5,\n \"pts\": 14,\n \"cv\": 0.29972737228296586\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9991388320922852\n }\n ],\n \"createdOn\": \"2019-06-21T23:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561154400,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 75.34381103515625\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d69dbe682842ecd991bee\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561160155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9988533854484558,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 74.22805786132812,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 10240.607305492562,\n \"dayofweek\": 5,\n \"zscore\": -3.2518372090029235,\n \"avg\": 40027.78787878788,\n \"min\": 14264,\n \"max\": 52037,\n \"value\": 6727,\n \"zpts\": 0,\n \"score\": 74.22805503262427,\n \"percentile\": 0.9988533832676518,\n \"hourofday\": 22,\n \"pctofavg\": 16.805825044268488,\n \"wscore\": 2971184.8415008774,\n \"pts\": 33,\n \"cv\": 0.25583745313388695\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9988533854484558\n }\n ],\n \"createdOn\": \"2019-06-21T23:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561154400,\n \"key\": \"__total\",\n \"maxScore\": 74.22805786132812\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d69dbe682842ecd991bef\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561160155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9991523623466492,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 75.40292358398438,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 5,\n \"wscore\": 2397102.414660467,\n \"zscore\": -3.336753830553183,\n \"min\": 9952,\n \"max\": 44239,\n \"value\": 3765,\n \"zpts\": 0,\n \"std\": 8399.054044969671,\n \"score\": 75.40292547514596,\n \"percentile\": 0.999152370115332,\n \"hourofday\": 22,\n \"pctofavg\": 11.84313247017174,\n \"avg\": 31790.575757575756,\n \"pts\": 33,\n \"cv\": 0.2641994944985594\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9991523623466492\n }\n ],\n \"createdOn\": \"2019-06-21T23:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561154400,\n \"key\": \"vpcFlows\",\n \"maxScore\": 75.40292358398438\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d68afe682842ecd991bec\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561159855242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 4,\n \"datasum\": 118,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 657.6979797979798,\n \"duration\": \"10m\",\n \"avg\": 39461.878787878784,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-21T23:30:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561158955,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d6657e682842ecd991beb\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561159255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 131,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 657.6979797979798,\n \"duration\": \"10m\",\n \"avg\": 39461.878787878784,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-21T23:20:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561158355,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d61a7e682842ecd991bea\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561158055243\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 5,\n \"datasum\": 124,\n \"cfgtype\": \"below\",\n \"cfgvalue\": \"10\",\n \"limit\": 667.129797979798,\n \"duration\": \"10m\",\n \"avg\": 40027.78787878788,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-21T23:00:55.243000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561157155,\n \"key\": \"__total\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d5bcbe682842ecd991be7\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561156555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9984208345413208,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 72.86084747314453,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 5,\n \"wscore\": 3067677.885897674,\n \"zscore\": -3.1597326652961026,\n \"min\": 15843,\n \"max\": 55508,\n \"value\": 10790,\n \"cv\": 0.23537598889917996,\n \"std\": 9910.092321467968,\n \"score\": 72.86084655872847,\n \"percentile\": 0.9984208603951824,\n \"hourofday\": 21,\n \"pctofavg\": 25.627479924888817,\n \"avg\": 42103.242424242424,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9984208345413208\n }\n ],\n \"createdOn\": \"2019-06-21T22:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561150800,\n \"key\": \"__total\",\n \"maxScore\": 72.86084747314453\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d5bcbe682842ecd991be8\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561156555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9993698596954346,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 76.46002960205078,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 7810.068685390893,\n \"wscore\": 2576174.7724196184,\n \"zscore\": -3.418291436927962,\n \"min\": 10215,\n \"max\": 45516,\n \"value\": 6996,\n \"zpts\": 0,\n \"dayofweek\": 5,\n \"score\": 76.46003091169433,\n \"percentile\": 0.9993698440757428,\n \"hourofday\": 21,\n \"pctofavg\": 20.76390088067691,\n \"avg\": 33693.09090909091,\n \"pts\": 33,\n \"cv\": 0.23180030310854077\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9993698596954346\n }\n ],\n \"createdOn\": \"2019-06-21T22:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561150800,\n \"key\": \"vpcFlows\",\n \"maxScore\": 76.46002960205078\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d5bcbe682842ecd991be9\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561156555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9977102875709534,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 71.0902099609375,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 321.3549347416968,\n \"wscore\": 69744.96530156519,\n \"zscore\": -3.0498268958113344,\n \"min\": 779,\n \"max\": 1951,\n \"value\": 1,\n \"zpts\": 0,\n \"dayofweek\": 5,\n \"score\": 71.0902108295709,\n \"percentile\": 0.9977102670181586,\n \"hourofday\": 21,\n \"pctofavg\": 0.10192880664889448,\n \"avg\": 981.0769230769231,\n \"pts\": 13,\n \"cv\": 0.3275532500895451\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9977102875709534\n }\n ],\n \"createdOn\": \"2019-06-21T22:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561150800,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 71.0902099609375\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d4dbbe682842ecd991be4\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561152955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9777425527572632,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 52.8753662109375,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 5,\n \"std\": 750.830455195432,\n \"zscore\": -2.285945023914082,\n \"min\": 755,\n \"max\": 3043,\n \"value\": 1,\n \"zpts\": 0,\n \"score\": 52.87536722945388,\n \"wscore\": 90805.88959269712,\n \"percentile\": 0.9777425250116939,\n \"hourofday\": 20,\n \"pctofavg\": 0.058229006363598554,\n \"avg\": 1717.357142857143,\n \"pts\": 14,\n \"cv\": 0.4372011135355841\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9777425527572632\n }\n ],\n \"createdOn\": \"2019-06-21T21:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561147200,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 52.8753662109375\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d4dbbe682842ecd991be6\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561152955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9525881409645081,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 41.44821548461914,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 5,\n \"wscore\": 1531751.4251036874,\n \"zscore\": -1.9826024940627962,\n \"min\": 10746,\n \"max\": 110529,\n \"value\": 6772,\n \"cv\": 0.41196054716778496,\n \"std\": 15224.32659556205,\n \"score\": 41.44821455647796,\n \"percentile\": 0.9525881514235726,\n \"hourofday\": 20,\n \"pctofavg\": 18.324599172967535,\n \"avg\": 36955.78787878788,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9525881409645081\n }\n ],\n \"createdOn\": \"2019-06-21T21:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561147200,\n \"key\": \"vpcFlows\",\n \"maxScore\": 41.44821548461914\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d3fabe682842ecd991be1\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561149355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9995070099830627,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 77.27127075195312,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 8092.912533833134,\n \"wscore\": 2733236.9996896996,\n \"zscore\": -3.4845265696506105,\n \"min\": 11793,\n \"max\": 48855,\n \"value\": 7172,\n \"zpts\": 0,\n \"dayofweek\": 5,\n \"score\": 77.27127146943721,\n \"percentile\": 0.9995069914886476,\n \"hourofday\": 19,\n \"pctofavg\": 20.27594237315388,\n \"avg\": 35371.96875,\n \"pts\": 32,\n \"cv\": 0.22879451780113694\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9995070099830627\n }\n ],\n \"createdOn\": \"2019-06-21T20:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561143600,\n \"key\": \"vpcFlows\",\n \"maxScore\": 77.27127075195312\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d3fabe682842ecd991be3\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561149355240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9978463649749756,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 71.39714813232422,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 5,\n \"std\": 10491.885261609252,\n \"zscore\": -3.0681836912370617,\n \"avg\": 43862.03125,\n \"min\": 16376,\n \"max\": 59149,\n \"value\": 11671,\n \"cv\": 0.23920199230648378,\n \"score\": 71.39714537278799,\n \"percentile\": 0.9978463581027367,\n \"hourofday\": 19,\n \"pctofavg\": 26.60843482938333,\n \"wscore\": 3131623.8215020197,\n \"pts\": 32,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9978463649749756\n }\n ],\n \"createdOn\": \"2019-06-21T20:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561143600,\n \"key\": \"__total\",\n \"maxScore\": 71.39714813232422\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d319be682842ecd991bde\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561145755244\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9921130537986755,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 63.23714828491211,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 5,\n \"wscore\": 116799.01542465265,\n \"zscore\": -2.656871532213144,\n \"min\": 791,\n \"max\": 2897,\n \"value\": 1,\n \"cv\": 0.37617873855231115,\n \"std\": 694.8021301061187,\n \"score\": 63.23714966142536,\n \"percentile\": 0.9921130508311343,\n \"hourofday\": 18,\n \"pctofavg\": 0.05414185165132648,\n \"avg\": 1847,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9921130537986755\n }\n ],\n \"createdOn\": \"2019-06-21T19:35:55.244000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561140000,\n \"key\": \"127.0.0.1\",\n \"maxScore\": 63.23714828491211\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d319be682842ecd991bdf\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561145755244\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9993727207183838,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 76.47566223144531,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 5,\n \"wscore\": 3325513.980370999,\n \"zscore\": -3.4195363760112474,\n \"min\": 18301,\n \"max\": 56061,\n \"value\": 10704,\n \"zpts\": 0,\n \"std\": 9586.272072017942,\n \"score\": 76.4756607369539,\n \"percentile\": 0.9993727205492474,\n \"hourofday\": 18,\n \"pctofavg\": 24.615607613143485,\n \"avg\": 43484.606060606064,\n \"pts\": 33,\n \"cv\": 0.22045208501273322\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9993727207183838\n }\n ],\n \"createdOn\": \"2019-06-21T19:35:55.244000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561140000,\n \"key\": \"__total\",\n \"maxScore\": 76.47566223144531\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d319be682842ecd991be0\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561145755244\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9998307228088379,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 80.2549057006836,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 7449.414160164559,\n \"wscore\": 2826733.431207126,\n \"zscore\": -3.7609587534760576,\n \"min\": 13989,\n \"max\": 48041,\n \"value\": 7205,\n \"cv\": 0.21149926120894902,\n \"dayofweek\": 5,\n \"score\": 80.25490588668492,\n \"percentile\": 0.999830736658262,\n \"hourofday\": 18,\n \"pctofavg\": 20.4560002202484,\n \"avg\": 35221.93939393939,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9998307228088379\n }\n ],\n \"createdOn\": \"2019-06-21T19:35:55.244000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561140000,\n \"key\": \"vpcFlows\",\n \"maxScore\": 80.2549057006836\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d238be682842ecd991bda\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561142155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9996846318244934,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 78.61784362792969,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 9482.742743596416,\n \"dayofweek\": 5,\n \"zscore\": -3.6023588689369888,\n \"avg\": 43335.242424242424,\n \"min\": 15344,\n \"max\": 56766,\n \"value\": 9175,\n \"cv\": 0.21882288440347156,\n \"score\": 78.61784697543543,\n \"percentile\": 0.9996846573873389,\n \"hourofday\": 17,\n \"pctofavg\": 21.172144164278077,\n \"wscore\": 3406923.4575524884,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9996846318244934\n }\n ],\n \"createdOn\": \"2019-06-21T18:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561136400,\n \"key\": \"__total\",\n \"maxScore\": 78.61784362792969\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d238be682842ecd991bdb\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561142155240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9997173547744751,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 78.92466735839844,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 7824.999598482637,\n \"wscore\": 2789542.125713294,\n \"zscore\": -3.6307175839181838,\n \"min\": 11075,\n \"max\": 49303,\n \"value\": 6934,\n \"cv\": 0.22139313863418883,\n \"dayofweek\": 5,\n \"score\": 78.92466686946673,\n \"percentile\": 0.999717365680589,\n \"hourofday\": 17,\n \"pctofavg\": 19.618403860201443,\n \"avg\": 35344.36363636364,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9997173547744751\n }\n ],\n \"createdOn\": \"2019-06-21T18:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561136400,\n \"key\": \"vpcFlows\",\n \"maxScore\": 78.92466735839844\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d157be682842ecd991bd7\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561138555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9992942214012146,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 76.0663833618164,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 9613.945474219585,\n \"wscore\": 3287326.2486052616,\n \"zscore\": -3.3873237103197713,\n \"min\": 18066,\n \"max\": 55986,\n \"value\": 10651,\n \"cv\": 0.22245983275852985,\n \"dayofweek\": 5,\n \"score\": 76.06638184587948,\n \"percentile\": 0.9992942194107813,\n \"hourofday\": 16,\n \"pctofavg\": 24.645653390326096,\n \"avg\": 43216.545454545456,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9992942214012146\n }\n ],\n \"createdOn\": \"2019-06-21T17:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561132800,\n \"key\": \"__total\",\n \"maxScore\": 76.0663833618164\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d157be682842ecd991bd8\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561138555240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9997088313102722,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 78.84191131591797,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 7892.750997616515,\n \"wscore\": 2812489.224947513,\n \"zscore\": -3.623009918867394,\n \"min\": 12841,\n \"max\": 47982,\n \"value\": 7077,\n \"cv\": 0.2212558033570918,\n \"dayofweek\": 5,\n \"score\": 78.84190988501285,\n \"percentile\": 0.9997088053486191,\n \"hourofday\": 16,\n \"pctofavg\": 19.838802983028273,\n \"avg\": 35672.51515151515,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9997088313102722\n }\n ],\n \"createdOn\": \"2019-06-21T17:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561132800,\n \"key\": \"vpcFlows\",\n \"maxScore\": 78.84191131591797\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d076be682842ecd991bd3\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561134955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9984551668167114,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 72.95905303955078,\n \"meta\": {\n \"hist_dev\": {\n \"dayofweek\": 5,\n \"wscore\": 2559735.2249938347,\n \"zscore\": -3.1661260899336447,\n \"min\": 7165,\n \"max\": 50442,\n \"value\": 8722,\n \"cv\": 0.23732488590249262,\n \"std\": 8326.435746940817,\n \"score\": 72.9590533903355,\n \"percentile\": 0.9984551618648151,\n \"hourofday\": 15,\n \"pctofavg\": 24.85994869535926,\n \"avg\": 35084.545454545456,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9984551668167114\n }\n ],\n \"createdOn\": \"2019-06-21T16:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561129200,\n \"key\": \"vpcFlows\",\n \"maxScore\": 72.95905303955078\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0d076be682842ecd991bd5\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561134955240\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 0.9981607794761658,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 72.15995025634766,\n \"meta\": {\n \"hist_dev\": {\n \"std\": 9797.858143408033,\n \"wscore\": 3072767.61102433,\n \"zscore\": -3.1150407391090384,\n \"min\": 12065,\n \"max\": 59080,\n \"value\": 12062,\n \"cv\": 0.23008996301848458,\n \"dayofweek\": 5,\n \"score\": 72.1599532914917,\n \"percentile\": 0.9981608049374676,\n \"hourofday\": 15,\n \"pctofavg\": 28.32603915373284,\n \"avg\": 42582.72727272727,\n \"pts\": 33,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"hist_dev\",\n \"probability\": 0.9981607794761658\n }\n ],\n \"createdOn\": \"2019-06-21T16:35:55.240000\",\n \"interval\": \"hour\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561129200,\n \"key\": \"__total\",\n \"maxScore\": 72.15995025634766\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n },\n {\n \"_score\": null,\n \"_index\": \"eventwatch_config\",\n \"_type\": \"alerts\",\n \"_id\": \"5d0cfcdfe682842ecd991bd2\",\n \"_uid\": \"\",\n \"_timestamp\": 0,\n \"_ttl\": 0,\n \"_routing\": \"\",\n \"_parent\": \"\",\n \"_version\": null,\n \"sort\": [\n 1561132255242\n ],\n \"highlight\": null,\n \"_source\": {\n \"maxProbability\": 100,\n \"fields\": [\n {\n \"field\": \"flows\",\n \"score\": 100,\n \"meta\": {\n \"rate_limit\": {\n \"datapts\": 2,\n \"datasum\": 2,\n \"cfgtype\": \"exceed\",\n \"cfgvalue\": \"250\",\n \"limit\": 1.2847222222222223,\n \"duration\": \"10m\",\n \"avg\": 3.0833333333333335,\n \"pts\": 12,\n \"zpts\": 0\n }\n },\n \"algorithm\": \"rate_limit\",\n \"probability\": 100\n }\n ],\n \"createdOn\": \"2019-06-21T15:50:55.242000\",\n \"interval\": \"minute\",\n \"bucket\": \"stream:import\",\n \"epoch\": 1561131355,\n \"key\": \"gsuites\",\n \"maxScore\": 100\n },\n \"fields\": null,\n \"_explanation\": null,\n \"matched_queries\": null,\n \"inner_hits\": null\n }\n ]\n },\n \"suggest\": null,\n \"aggregations\": {\n \"fields.field\": {\n \"doc_count_error_upper_bound\": 0,\n \"sum_other_doc_count\": 0,\n \"buckets\": [\n {\n \"key\": \"flows\",\n \"doc_count\": 270\n }\n ]\n }\n },\n \"timed_out\": false,\n \"terminated_early\": false,\n \"_shards\": {\n \"total\": 1,\n \"successful\": 1,\n \"failed\": 0\n }\n }\n}"}],"_postman_id":"224d3bb6-a4d0-4601-a8dd-0283ea1cdb89"}],"id":"cff7b3e0-eabf-43c6-9f3c-8569338805ef","_postman_id":"cff7b3e0-eabf-43c6-9f3c-8569338805ef","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Files","item":[{"name":"Retrieve Facet","event":[{"listen":"test","script":{"id":"9ae907d5-4e31-4231-b4c5-d6e2c02b329a","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"7635aa12-e277-4c6c-a241-b0702fcc0536","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"action\": \"list\",\n\t\t\"args\": {}\n\t}\n}"},"url":"{{baseUrl}}/api/ds/facet_config","description":"

Get list of facets for file searches. Set the kargs.action field to \"list\".

Create, edit buttons are currently broken, Delete button has not been tested

\n","event":[{"listen":"prerequest","script":{"id":"5f1503cd-34fc-4884-9e05-fe2b5b02f61f","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"9250f6e9-6233-4565-97d6-206cedbef0d7","type":"text/javascript","exec":[""]}}],"_postman_id":"4e150987-f994-45af-9a0a-6ff4541be9f2","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}}],"id":"c84b4fed-5cb0-412e-b550-a761ee676298","_postman_id":"c84b4fed-5cb0-412e-b550-a761ee676298","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Global","item":[{"name":"Event Specific Calls","item":[],"id":"53baba60-ff02-4af0-a778-c62a79d7f884","_postman_id":"53baba60-ff02-4af0-a778-c62a79d7f884","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Flow Specific Calls","item":[{"name":"Get Flow Data","event":[{"listen":"prerequest","script":{"id":"1381c0d9-be05-4336-b39b-e22f7a3b7acb","exec":["pm.environment.set(\"dataType\", '\"metaflow\"');","pm.environment.set(\"dateFacetField\", '\"start_ms\"');","pm.environment.set(\"facets\", `[{"," \"title\": \"Risks\","," \"size\": 20,"," \"order\": \"count\","," \"field\": \"risks\""," }, {"," \"title\": \"Signatures\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"alerts.sid\","," \"type\": \"sid\""," }, {"," \"title\": \"Applications\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"applications\""," }, {"," \"title\": \"Incidents Tags\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"incidents\""," }, {"," \"title\": \"Information Tags\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"tags\""," }, {"," \"title\": \"Destination Ports\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"dp\","," \"type\": \"dport\""," }, {"," \"title\": \"Dest. Countries\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"d_country\","," \"type\": \"country\""," }, {"," \"title\": \"Source Countries\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"s_country\","," \"type\": \"country\""," }, {"," \"title\": \"Sources\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"sip\""," }, {"," \"title\": \"Destinations\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"dip\""," }]`);","pm.environment.set(\"dateFacets\", `[{"," \"name\": \"dateHistogram\","," \"key\": \"start_ms\""," }, {"," \"name\": \"rxHistogram\","," \"key\": \"start_ms\","," \"value\": \"rxB\""," }, {"," \"name\": \"txHistogram\","," \"key\": \"start_ms\","," \"value\": \"txB\""," }]`);","pm.environment.set(\"sortField\", '\"start_ms\"');","","pm.environment.set(\"fetchOffset\", 0);","pm.environment.set(\"fetchLimit\", 20);","pm.environment.set(\"searchString\", '\"\"');","pm.environment.set(\"sortOrder\", '\"desc\"');","pm.environment.set(\"mustFilters\", '[]');","pm.environment.set(\"mustNotFilters\", '[]');","pm.environment.set(\"partition\", '\"default\"');"],"type":"text/javascript"}},{"listen":"test","script":{"id":"197a9258-8b15-45a0-8dd2-702ce576d3b8","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"33789343-caaf-48c3-84a2-8d1f43372ad4","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","type":"text","value":"{{fluencytoken}}"},{"key":"Accept","type":"text","value":"application/json"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"partition\": \"default\",\n \"dataType\": \"metaflow\",\n \"options\": {\n \"dataType\": \"metaflow\",\n \"dateFacetField\": \"start_ms\",\n \"facets\": {\n \"facets\": {{facets}},\n \"mustFilters\": {{mustFilters}},\n \"mustNotFilters\": {{mustNotFilters}},\n \"dateFacets\": {{dateFacets}}\n },\n \"searchStr\": \"\",\n \"sortField\": \"start_ms\",\n \"sortOrder\": \"desc\",\n \"range_from\": {{startTime}},\n \"range_to\": {{endTime}},\n \"fetchOffset\": 0,\n \"fetchLimit\": 20\n }\n }\n}"},"url":"{{baseUrl}}/api/ds/get_index_zoom_histogram_lv3","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","get_index_zoom_histogram_lv3"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"33789343-caaf-48c3-84a2-8d1f43372ad4"}],"id":"ec40447d-25d4-4595-9470-5130638c98ab","_postman_id":"ec40447d-25d4-4595-9470-5130638c98ab","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Get Flow/Event Data","event":[{"listen":"prerequest","script":{"id":"1381c0d9-be05-4336-b39b-e22f7a3b7acb","exec":["let dataType = \"event\";","","switch (dataType) {"," case \"flow\":"," pm.environment.set(\"dataType\", '\"metaflow\"');"," pm.environment.set(\"dateFacetField\", '\"start_ms\"');"," pm.environment.set(\"facets\", `[{"," \"title\": \"Risks\","," \"size\": 20,"," \"order\": \"count\","," \"field\": \"risks\""," }, {"," \"title\": \"Signatures\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"alerts.sid\","," \"type\": \"sid\""," }, {"," \"title\": \"Applications\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"applications\""," }, {"," \"title\": \"Incidents Tags\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"incidents\""," }, {"," \"title\": \"Information Tags\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"tags\""," }, {"," \"title\": \"Destination Ports\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"dp\","," \"type\": \"dport\""," }, {"," \"title\": \"Dest. Countries\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"d_country\","," \"type\": \"country\""," }, {"," \"title\": \"Source Countries\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"s_country\","," \"type\": \"country\""," }, {"," \"title\": \"Sources\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"sip\""," }, {"," \"title\": \"Destinations\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"dip\""," }]`);"," pm.environment.set(\"dateFacets\", `[{"," \"name\": \"dateHistogram\","," \"key\": \"start_ms\""," }, {"," \"name\": \"rxHistogram\","," \"key\": \"start_ms\","," \"value\": \"rxB\""," }, {"," \"name\": \"txHistogram\","," \"key\": \"start_ms\","," \"value\": \"txB\""," }]`);"," pm.environment.set(\"sortField\", '\"start_ms\"');"," break;"," "," case \"event\":"," pm.environment.set(\"dataType\", '\"event\"');"," pm.environment.set(\"dateFacetField\", '\"@timestamp\"');"," pm.environment.set(\"facets\", `[{"," \"title\": \"Source\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"@source\""," }, {"," \"title\": \"Tags\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"@tags\""," }, {"," \"title\": \"Severity\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"@level\""," }, {"," \"title\": \"Event Type\","," \"size\": 50,"," \"order\": \"count\","," \"field\": \"@fields.event_type\""," }]`);"," pm.environment.set(\"dateFacets\", `[{"," \"name\": \"dateHistogram\","," \"key\": \"@timestamp\""," }]`);"," pm.environment.set(\"sortField\", '\"@timestamp\"');"," break;"," default:"," break;","}","","pm.environment.set(\"fetchOffset\", 0);","pm.environment.set(\"fetchLimit\", 20);","pm.environment.set(\"searchString\", '\"\"');","pm.environment.set(\"sortOrder\", '\"desc\"');","pm.environment.set(\"mustFilters\", '[]');","pm.environment.set(\"mustNotFilters\", '[]');","pm.environment.set(\"partition\", '\"default\"');"],"type":"text/javascript"}},{"listen":"test","script":{"id":"197a9258-8b15-45a0-8dd2-702ce576d3b8","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});","","pm.test(\"There were events in this time period\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.response.hits.total).to.be.above(0);","});"],"type":"text/javascript"}}],"id":"b7983eaf-cc2b-4690-b43d-80717fc00df5","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","type":"text","value":"{{fluencytoken}}"},{"key":"Accept","type":"text","value":"application/json"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"dataType\": {{dataType}},\n \"options\": {\n \"fetchOffset\": {{fetchOffset}},\n \"fetchLimit\": {{fetchLimit}},\n \"dataType\": {{dataType}},\n \"dateFacetField\": {{dateFacetField}},\n \"facets\": {\n \"facets\": {{facets}},\n \"mustFilters\": {{mustFilters}},\n \"mustNotFilters\": {{mustNotFilters}},\n \"dateFacets\": {{dateFacets}}\n },\n \"searchStr\": {{searchString}},\n \"sortField\": {{sortField}},\n \"sortOrder\": {{sortOrder}},\n \"range_from\": {{startTime}},\n \"range_to\": {{endTime}}\n },\n \"partition\": {{partition}}\n }\n}"},"url":"{{baseUrl}}/api/ds/get_index_zoom_histogram_lv3","description":"

This routine provides detailed information of flow events over a period of time. This also provides the data for this range of a more detailed histogram.

Provide the following parameters:

{{dataType}}: the type of data needed (may be deprecated)
{{fetchOffset}}: a deprecated parameter, set this to 0
{{fetchLimit}}: limits the number of results retrieved. For default results, set this to 20
{{dateFacetField}}: details how the facets should used for time-dependent parameters
{{facets}}: complex versions of queries to Fluency's own database that can be saved. See the Facets folder for more information on how to write a facet.
{{mustFilters}}: filters that are required to be satisfied
{{mustNotFilters}}: filters that are required to be not satisfied
{{dateFacets}}: the array of time-dependent facets
{{searchString}}: query used to perform search on the database (currently a Lucene search)
{{sortField}}: field to sort by (usually the same as {{dateFacetField}})
{{sortOrder}}: the order that results are sorted by. The options are \"desc\" for descending, and \"asc\" for ascending
{{partition}}: sets the data partition guidelines to use. Usually, this parameter should be set to \"default\".

The {{startTime}} and {{endTime}} parameters are automatically generated with the current UNIX timestamp in nanoseconds (see the introduction for more information).

Gets flow or event histogram data. Provide the following parameters:

{{bucketGroup}}: the buckets used to group the data. This parameter may be deprecated. Use the value \"normal:service\" for flows, and \"stream:import\" for events
{{dataInterval}}: time interval which the data is to be collected (e.g. \"hour\")
{{topCount}}: number of results to display at a time
{{sortField}}: field to sort by

The {{startSeconds}} and {{endSeconds}} parameters are automatically generated using a UNIX timestamp in milliseconds (see the introduction for more information)

List all collectors stored in system

List all pipes for a collector, given its name for the {{collectorName}} parameter (example: \"terplab-s1\"))

\n","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","pipe_list"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[{"id":"12ff38d8-2fc8-4082-865d-73470a43420c","name":"List Pipes","originalRequest":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"collector\": \"terplab-s1\"\n }\n}"},"url":"{{baseUrl}}/api/ds/pipe_list"},"_postman_previewlanguage":null,"header":null,"cookie":[],"responseTime":null,"body":"{\n \"verdict\": \"OK\",\n \"response\": {\n \"pipes\": [\n {\n \"name\": \"eth1\",\n \"id\": 6,\n \"bpf\": null,\n \"status\": \"on\",\n \"promiscuous\": 1,\n \"nic\": \"eth1\",\n \"snort_status\": \"on\",\n \"snort_enable\": 1,\n \"zc_enable\": 0,\n \"on\": true,\n \"partition\": \"default\",\n \"stat\": [\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564577432745,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564577432745,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564577372732,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564577372732,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564577312720,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564577312720,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564577252707,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564577252707,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564577192694,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564577192694,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564577132681,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564577132681,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564577072668,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564577072668,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564577012655,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564577012655,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576952644,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576952644,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576892632,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576892632,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576832619,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576832619,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576772606,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576772606,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576712593,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576712593,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576652578,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576652578,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576592565,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576592565,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576532551,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576532551,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576472539,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576472539,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576412525,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576412525,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576352511,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576352511,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576292498,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576292498,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576232483,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576232483,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576172468,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576172468,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576112453,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576112453,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564576052439,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564576052439,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575992424,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575992424,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575932410,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575932410,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575872396,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575872396,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575812375,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575812375,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575752363,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575752363,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575692350,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575692350,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575632336,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575632336,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575572323,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575572323,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575512310,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575512310,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575452296,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575452296,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575392282,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575392282,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575332269,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575332269,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575272256,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575272256,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575212242,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575212242,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575152228,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575152228,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575092215,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575092215,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564575032202,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564575032202,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574972190,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574972190,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574912177,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574912177,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574852164,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574852164,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574792150,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574792150,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574732137,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574732137,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574672124,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574672124,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574612111,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574612111,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574552099,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574552099,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574492087,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574492087,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574432074,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574432074,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574372061,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574372061,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574312048,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574312048,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574252035,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574252035,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574192022,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574192022,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574132008,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574132008,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574072995,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574072995,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564574012981,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564574012981,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573952969,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573952969,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573892957,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573892957,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573832943,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573832943,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573772928,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573772928,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573712913,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573712913,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573652900,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573652900,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573592887,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573592887,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573532873,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573532873,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573472860,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573472860,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573412847,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573412847,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573352834,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573352834,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573292821,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573292821,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573232807,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573232807,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\",\n \"{\\\"name\\\":\\\"eth1\\\",\\\"startedOn\\\":\\\"2019-07-26 09:20:30\\\",\\\"hb\\\":1564573172793,\\\"stat\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"watermark\\\":1,\\\"vsize\\\":889200640,\\\"rss\\\":630059008,\\\"pid\\\":3033,\\\"dur\\\":60000,\\\"pollTime\\\":1564573172793,\\\"stat-0\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"stat-1\\\":{\\\"session\\\":{\\\"tcp_tuple\\\":0,\\\"udp_tuple\\\":0,\\\"icmp_tuple\\\":0,\\\"ip_tuple\\\":0,\\\"file_captured\\\":0,\\\"decoder_http\\\":0,\\\"ooo_session\\\":0,\\\"oversize_session\\\":0,\\\"packet_loss_session\\\":0,\\\"published_session\\\":0,\\\"scanner_session\\\":0,\\\"fragment_timeout\\\":0},\\\"ip\\\":{\\\"total\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv4\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipv6\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"arp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"rarp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"vlan\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"pppoe\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipx\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"tcp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"udp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"icmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"igmp\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipip\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"gre\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipsec\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"ipfrag\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"error\\\":{\\\"802.3\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"truncated_ethernet\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ip_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_ether_type\\\":{\\\"p\\\":0,\\\"b\\\":0},\\\"unknown_gre_protocol\\\":{\\\"p\\\":0,\\\"b\\\":0}},\\\"tcpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"udpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"icmpMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"ipMem\\\":{\\\"total_tuple\\\":0,\\\"pool_tuple\\\":0,\\\"pool_mem\\\":0,\\\"max_mem\\\":0},\\\"tcpStates\\\":[0,0,0,0,0,0,0,0,0,0]},\\\"allocatedTuple\\\":1024000,\\\"availableTuple\\\":1024000}\"\n ]\n }\n ]\n }\n}"}],"_postman_id":"cc955bb6-4027-42cd-b7ad-2cc06c7fcd68"},{"name":"Add Collector","event":[{"listen":"test","script":{"id":"c72617bf-0d19-4cc9-9da3-1b31425742e2","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}},{"listen":"prerequest","script":{"id":"2e5002d6-2b57-4c04-b42a-5ff5f83bd052","exec":["pm.environment.set(\"collectorName\", '\"myCollector\"');","pm.environment.set(\"collectorDescription\", '\"a description for myCollector\"');","pm.environment.set(\"collectorLocal\", 'false');","pm.environment.set(\"collectorTags\", `[]`);"],"type":"text/javascript"}}],"id":"3157ec2f-6cdc-49cb-88ea-55d0a92f1fb2","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"name\": {{collectorName}},\n \"description\": {{collectorDescription}},\n \"local\": {{collectorLocal}},\n \"tags\": {{collectorTags}},\n \"createdOn\": {{startTime}}\n }\n}"},"url":"{{baseUrl}}/api/ds/collector_create","description":"

Call to add a data collector. The parameters to include are:

{{collectorName}}: the collector's name
{{collectorDescription}}: a short description of the collector's purpose/function
{{collectorLocal}}: boolean that controls whether the collector is to collector local or remote data
{{collectorTags}}: tags that the collector is assigned to

The {{startTime}} parameters are automatically generated with the current UNIX timestamp in nanoseconds (see the introduction for more information).

Configure cloud settings for a collector given its name (parameter: {{collectorName}}). Enter \"cloud\" for the {{collectorService}} parameter

Retrieves the specified collector's configurations, given the collector's name (parameter: {{collectorName}}).

Loads Vulcan Configuration for a collector given by its name (variable: {{collectorName}}). Use the \"list\" option for kargs.action.

Delete the specified collector by its unique ID, given by the variable {{collectorID}} (example: \"AWt6cNhZU5RLge5O3sP0\")

List all event configurations, make sure to use the \"list\" option for kargs.action

Call to add or modify input, data saving, or data discard rule.

kargs.streamId parameters:
- Input: \"input\"
- Data Saving: \"save\"
- Data Discard: \"discard\"
\n

Enter the following parameters:

{{streamName}}: the name of the stream
{{streamDescription}}: a short description of the stream
{{streamSink}}: the action the stream should take after receiving data. The pptions are:
- \"n/a\"
- \"discard\"
- \"save\"
\n
{{streamMatches}}: the matches that the stream should follow. NOTE: if the matchAll option is turned on, this should not be used (Fluency will prompt you choose one)). See the example request to see how to format the matches.
{{streamFilters}}: the filters the the stream will use to narrow down the incoming data. Note that this in an array of JSONs

The following are action-dependent parameters:

Add

Use kargs.location (the position on the list of rules)

Update

Use kargs.pipeId (use ID of specified rule)

Delete the input, data saving, or data discard rule given the rule ID for the {{ruleID}} parameter. Modify {{streamType}} accordingly based on type of rule:

Input: \"input\"
Data Saving: \"save\"
Data Discard: \"discard\"

Call to set input stream sink. Options for {{streamType}} are: \"n/a\", \"sink\", \"discard\". Set {{streamSink}} to \"input\" or \"save\".

Call that validates a lambda rule (validates the script). Select the \"validate\" option for kargs.action, and enter the following additional parameters:

the script's language it was written in for {{scriptLang}} (currently javascript or groovy)
although not listed as a parameter (due to technical issues in Postman), the script body should be changed to the desired script (Example: for javascript, \"// event: java.util.HashMap<String,Object>\\n// context: java.util.HashMap<String,Object>\\n// return false to abort the current event process pipe\\nvar fluencyLambdaEventHandler = function (event,context) {\\n return true;\\n};\\n\")

Call that tests out a lambda rule, provided by its script, test input, and context. Set the kargs.action field to \"run\", and provide the following additional parameters:

the script's language it was written in for {{scriptLang}} (currently javascript or groovy)
although not listed as a parameter (due to technical issues in Postman), the script body should be changed to the desired script (Example: for javascript, \"// event: java.util.HashMap<String,Object>\\n// context: java.util.HashMap<String,Object>\\n// return false to abort the current event process pipe\\nvar fluencyLambdaEventHandler = function (event,context) {\\n return true;\\n};\\n\")
input as needed for {{input}}
context for {{context}}

Add or update a lambda rule for event streams. Provide the following parameters:

Name of lambda rule for {{lambdaName}}
Short description of the lambda rule for {{lambdaDescription}}
Language of the script for {{scriptLang}} (Currently supporting javascript and groovy)
Although not listed as a parameter (due to technical issues in Postman), the script body should be changed to the desired script (Example: for javascript, \"// event: java.util.HashMap<String,Object>\\n// context: java.util.HashMap<String,Object>\\n// return false to abort the current event process pipe\\nvar fluencyLambdaEventHandler = function (event,context) {\\n return true;\\n};\\n\")

The {{createTime}} and {{updateTime}} parameter will automatically be filled out with an ISODate representation of the current date and time (Example: 1561129334399)

These next parameters are action-dependent (add vs. update):

Add

Set the kargs.action field to \"add\"

Update

Set the kargs.action field to \"add\"
Add the rule's unique ID for the fields kargs.args.id and kargs.args.event._id.

Call to delete a lambda rule. Select the \"delete\" option for kargs.action and provide the lambda rule id for {{lambdaID}}.

Get the informantion for a Lambda function

Call that retrieves all cloud import services. The current list of services (as of Fluency 6.6) are:

Azure
CarbonBlack
Crowdstrike-Falcon
Cylance
G-Suites
Office365
Okta

Set the kargs.action option to \"list\".

Call to add a CrowdStrike-Falcon cloud import data stream. Set kargs.action to \"create\", kargs.entry.name and kargs.entry.type to \"CrowdStrike-Falcon\". Additionally, add the following to kargs.state:

API key for {{importAPIKey}}
UUID for {{importUUID}}
App ID for {{importAppID}}

Call to add a cylance cloud import data stream. Set kargs.action to \"create\", and set kargs.entry.name and kargs.entry.type to \"Cylance\". Additionally, add the following to kargs.state:

tenant ID for {{importID}}
application ID for {{importAppID}}
secret for {{importSecret}}

Note that the default application ID and secret is set to your username and password

Disable or delete a cloud import service given its name for {{importType}}. Set {{kAction}} to \"disable\" to disable a cloud import, or \"delete\" to delete a cloud import. NOTE: a cloud import must be disabled before it is deleted. Otherwise, Fluency will return an error

Import data from cloud services, including G-Suite, Office365, Okta, Falcon, and Cylance. Examples are given for Falcon and Cylance, modify the state fields accordingly (they are different for each service).

\n","event":[{"listen":"prerequest","script":{"id":"1e59013f-b2ee-4458-a58f-e493b39f519c","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"6779184b-158e-4b22-8e8b-ab2324026499","type":"text/javascript","exec":[""]}}],"_postman_id":"3818a885-f0a1-4435-9f19-545ff2b8910c","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Event Export","item":[{"name":"Get Notification Configuration","event":[{"listen":"test","script":{"id":"68eb64a2-d699-44a1-9fae-6e9b67c2628e","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"5bc90f2d-5fe0-4a91-b5a1-134fc3a4c8a7","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"action\": \"list\"\n }\n}"},"url":"{{baseUrl}}/api/ds/get_notification_config","description":"

Call that retrieves all notifications. Set the kargs.action field to \"list\".

Call that lists all users in the Fluency system.

Call to add data export pipe. Inkargs.entry, provide the following parameters:

Name of the pipe for {{pipeName}}
Short desciption of the pipe for {{pipeDescription}}
One of the following:
- Match all option for {{matchAllOption}}. Do not use this with custom matches
- event selector matches for {{matches}}. Put the matches into an array. Note that if matchAll is true, this should be an empty array.
\n
Event export filters for {{exportFilters}}. Put these into an array. Example: [\"fluency_info\"]
Lambda rules used for {{lambdas}}. Example: \n [\n \"5b27c2400f9807187b7c4ef5\",\n \"5ba8cd010f98076adeb3bfdd\"\n ]

Call to delete an export pipe. Provide the pipeid for {{pipeID} (example: \"5d0d3f6d0f98077bea19515f\").

Call to add an export method. Provide the following details in kargs.export:

Export method for {{exportMethod}}. Currently, Fluency supports two methods: email and Slack, which are represented by the values \"email\" and \"slack\".
Name of the export method for {{exportName}}
Description of the export method for {{exportDescription}}
In kargs.export.config:
- In kargs.export.config.email:
  - Emails to export data to for {{emailTo}}. Put all emails in an array. Example: [\"alex.liu@fluencysecurity.com\"]
  - Emails to export carbon copy (CC) of data to for {{emailcc}}. Put all emails in an array. Example: [\"admin@security.do\"]
  \n
- In kargs.export.config.slack:
  - Slack channels to export data to for {{slackChannels}}. Format them in an array
  - Slack users to export data to for {{slackUsers}}. Format them in an array. Keep notice of slack users not in the channels described.
  \n
\n

The date created and date updated will be autogenerated for the {{createDate}} and {{updateDate}} parameters, respectively (example: 1561149402937).

Call to delete an export method by export ID, given by {{exportName}}

Call to validate an export lambda. Provide the following:

script language for {{scriptLang}}. Currently, Fluency supports two languages: javascript and groovy
the script itself for {{scriptText}}

Call to test out an export lambda. Provide the following:

script language for {{scriptLang}}. Currently, Fluency supports two languages: javascript and groovy
the script itself for {{scriptText}}
testing input for {{input}}
context for {{context}}

Call to add an export lambda. Provide the following in kargs.lambda:

Name of the export lambda for {{lambdaName}}
Scripting language of the export lambda for {{scriptLang}}. Fluency currently supports two languages: javascript and groovy
Short description of the purse of the lambda function for {{lambdaDescription}}.
The script itself for {{scriptText}}
Time of creation for {{startTime}} (note: this is NOT a date) (example: 1561149760735)
Time of current update for {{endTime}}. For adding an export lambda, {{startTime}} and {{endTime}} will be the same.

Note: The {{startTime}} and {{endTime}} parameter will automatically be filled out with an UNIX timestamp representation of the current date and time

Call to update an export lambda. Provide the following in kargs.entry:

Name of the export lambda for {{lambdaName}}
Scripting language of the export lambda for {{scriptLang}}. Fluency currently supports two languages: javascript and groovy
Short description of the purse of the lambda function for {{lambdaDescription}}.
The script itself for {{scriptText}}
Time of creation for {{startTime}} (note: this is NOT a date) (example: 1561149760735)
Time of current update for {{endTime}}.

Note: The {{startTime}} and {{endTime}} parameter will automatically be filled out with an UNIX timestamp representation of the current date and time

Additionally, for kargs.lambdaId, provide the lambda function ID for {{lambdaid}} (example: \"5d0d41210f98077bea195160\")

Delete an export lambda function. Provide the lambda Id for {{lambdaID}}.

Retrieves all device configurations stored in the Fluency product.

Call to add a device to export list. Provide the following options in kargs.entry:

Name of the device for {{deviceName}}
Short description of the device's details for {{deviceDescription}}
IP address of the device for {{deviceIP}} (Note: IPv6 addresses have not been tested yet)
Hostname for {{deviceHost}}
The type of device for {{deviceType}}

For the device type, the options are:

Generic Device
Nexpose
Nessus
Cisco ASA Firewall
Cisco Meraki Firewall
Netscreen Firewall
Fortinet Firewall
FireWall-Unknown Vendor
Blue Coat ProxySG
WebSense
WebProxy-Unknown Vendor
McAfee WebGateway
SourceFire IPS
Snort IDS
Suricata IDS
Palo Alto IPS
FireEye
Fidelis
Damballa
Norse DarkWatch
IPS/IDS-Unknown Vendor
Cisco User Context Manager
IBM QRadar
McAfee Nitro
SIEM-Unknown Vendor
Splunk
Log Manager-Unknown Vendor
Windows Domain Controller
WebServer
Database Server

Call to update a device. Add the following to kargs.entry:

Device id for {{deviceIP}}. Example: \"5d0d50710f98077bea195162\"
Name of the device to update for {{deviceName}}
Description of the device for {{deviceDescription}}
IP address of the device for {{deviceIP}}. Currently not sure if IPv6 addresses work right now
Device's hostname for {{deviceHost}}. This is different from the device name
Device's status (up or down) for {{deviceStatus}}. This is represented using a boolean, with true representing a running device, and false representing a device that is down.
The index on the device list for {{deviceIndex}}, where the first element has the index of 0.

The kargs.entry.device field should be one of the following:

Generic Device
Nexpose
Nessus
Cisco ASA Firewall
Cisco Meraki Firewall
Netscreen Firewall
Fortinet Firewall
FireWall-Unknown Vendor
Blue Coat ProxySG
WebSense
WebProxy-Unknown Vendor
McAfee WebGateway
SourceFire IPS
Snort IDS
Suricata IDS
Palo Alto IPS
FireEye
Fidelis
Damballa
Norse DarkWatch
IPS/IDS-Unknown Vendor
Cisco User Context Manager
IBM QRadar
McAfee Nitro
SIEM-Unknown Vendor
Splunk
Log Manager-Unknown Vendor
Windows Domain Controller
WebServer
Database Server

Call to delete a device, accessed by device ID for the parameter {{deviceID}}. Example: \"5d0d50990f98077bea195163\"

Call to test FSB service. Provide the collector in order to make this call, as specified by {{collectorName}}. The default is an empty string. At the moment, use the value of \"cloud\" for {{serviceType}}.

Call to load FSB settings for the collector as specified by {{collectorName}}. The default is an empty string.

Call to edit a collector's FSB configurations. Provide the following:

Collector name for {{collectorName}}
Collector service type for {{serviceType}}
Collector URL source for {{cloudURL}} (example: \"https://cloud.securitydo.com\")
Collector identifying token for {{collectorToken}} (example: \"ba2ee8f4-2d8d-4bc2-7600-57130bf0a6d5\")

Call to edit the license key, which should used for the {{licenseKey}} parameter. Eexample of one: \"7e8117485e5e8ab2d5070a5bef24b4f9650a5120bb50579ca17931b5da1cb30ba\"

Call to edit LIVE configurations. For each file type (exe, jar, apk, pdf, swf, office, zip, rar), specify whether hash scan, full scan, or local scan should be used as a boolean. An example a LIVE configuration for the .exe file extension would be:

{\n    \"file_type\": \"exe\",\n    \"hash_scan\": true,\n    \"full_scan\": true,\n    \"local_scan\": true\n}\n

Store this in the {{vtConfig}} parameter.

Call to edit PCAP configurations. For each file type (exe, jar, apk, pdf, swf, office, zip, rar), specify whether hash scan, full scan, or local scan should be used as a boolean. An example a LIVE configuration for the .exe file extension would be:

{\n    \"file_type\": \"exe\",\n    \"hash_scan\": true,\n    \"full_scan\": true,\n    \"local_scan\": true\n}\n

Store this in the {{vtConfig}} parameter.

Retrieve VirusTotal status (currently just a color indicator)

Call to list all API tokens. Use the \"list\" option for the kargs.action field.

Call to add an API token. Use the \"add\" option for kargs.action, and include the following for kargs.args.entry:

Token authorized rights for {{tokenRights}} (options are: admin, analyst, device)
Token name for {{tokenName}}
Token description for {{tokenDescription}}

Call to delete an API token. Enter the token's name (NOTE: not the token itself), for {{tokenName}}, and use the \"delete\" value for the kargs.action option.

NOTE: this function is broken on the current interface (as of 07/31/2019, 12:25), stay tuned for a fix

Call to retrieve all users (accounts) that have setup Fluency's product through Amazon AWS.

Call to add an AWS User to the Fluency product. Include the following fields:

The AWS username for {{awsUser}}
Access Key for {{awsKey}}
Secret access key for {{awsSecret}}

Call to delete an AWS User, put the user id for {{awsUserID}}

Get AWS Cloudtrail given the AWS User's unique ID, {{awsUserID}}, and the queue URL for the parameter {{queueURL}}

Add or update an AWS Cloudtrail. Modify kargs accordingly, specifically:

Add: don't add anything below:
Update:
- kargs.id: (id of cloudtrail)
- kargs.entry.status: (status of cloudtrail)
- kargs.entry.index: (index of cloudtrail in DB)
\n

In addition, the following parameters should be added:

Name of the cloudtrail to add or update for {{awsCloudtrailName}}
AWS User id for {{awsUserID}}
Queue URL for {{queueURL}}

Delete an AWS Cloudtrail by its unique ID for the {{awsCloudtrailID}}} parameter.

Call to get an AWS S3 Bucket provided the AWS user ID number for the {{awsUserID}} and queued URL for the {{queueURL}}

Call to test out an AWS S3 Bucket provided the AWS user ID number (for {{awsUserID}} ) and queued URL (for {{queueURL}} )

Call to add an AWS S3 Bucket. Provide the folowing parameters in kargs.entry:

Name of this instance of the S3 bucket for {{awsS3Name}}
S3 Bucket being used for {{awsS3Bucket}}
Event source for {{awsS3Source}}
AWS user ID for {{awsUserID}}
Queued URL for {{queueURL}}

Call to update an AWS S3 Bucket. Provide the folowing parameters in kargs.entry:

Unique ID of the S3 Bucket for {{awsS3ID}}
Name of this instance of the S3 bucket for {{awsS3Name}}
Queue URL for {{queueURL}}
The AWS user's unique ID for {{awsUserID}}
S3 Bucket being used for {{awsS3Bucket}}
Event source for {{awsS3Source}}
The index of the S3Bucket for {{awsS3Index}}

Call to delete an AWS S3 Bucket by it's id for {{awsS3ID}}

Call to retrieve an AWS Cloudwatch, given the AWS user's unique ID for {{awsUserID}} and region the AWS Cloudwatch applies for the parameter {{awsCloudwatchRegion}}.

Call to test AWS Cloudwatch connection, given the AWS user's unique ID for {{awsUserID}} and region the AWS Cloudwatch applies for the parameter {{awsCloudwatchRegion}}.

Call to add an AWS Cloudwatch to an AWS user, given the following parameters:

Name of the AWS Cloudwatch for {{awsCloudwatchName}}
Region the AWS Cloudwatch applies for the parameter {{awsCloudwatchRegion}}
AWS user's unique ID for {{awsUserID}}
Whether the AWS Cloudwatch should be activated or not for {{awsCloudwatchEnabled}}

Call to add an AWS Cloudwatch to an AWS user, given the following parameters:

Unique ID of the AWS Cloudwatch
Name of the AWS Cloudwatch for {{awsCloudwatchName}}
Region the AWS Cloudwatch applies for the parameter {{awsCloudwatchRegion}}
AWS user's unique ID for {{awsUserID}}
Whether the AWS Cloudwatch should be activated or not for {{awsCloudwatchEnabled}}
The AWS Cloudwatch's status for {{awsCloudwatchStatus}}
Position on the list of Cloudwatches for {{awsCloudwatchIndex}}

The AWS Cloudwatch regions in the Fluency system options are as follows (at the moment):

us-east-1
us-east-2
us-west-1
us-west-2
ca-central-1
eu-central-1
eu-west-1
eu-west-2
eu-west-3
ap-northeast-1
ap-northeast-2
ap-northeast-3
ap-south-1
ap-southeast-1
ap-southeast-2
cn-north-1
cn-northwest-1
sa-east-1

\n","event":[{"listen":"prerequest","script":{"id":"99254f42-c578-42f9-af5e-cc4b0765cf2c","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"41b13625-ce00-49c1-b799-09fe887c476b","type":"text/javascript","exec":[""]}}],"_postman_id":"8fc7a3ce-a4bf-4e74-b8e6-70f49b58919f","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"List AWS Users","event":[{"listen":"test","script":{"id":"39db7dca-a7c6-4e0b-a823-f3026282ee7a","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"40e33b88-51ef-4a1c-bed4-30819bd8e46d","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\"kargs\":{}}"},"url":"{{baseUrl}}/api/ds/list_aws_user","description":"

List all AWS users for configurating new AWS tools (not for configuration of new user, however)

NOT COMPLETE (Cloudwatches)

\n","event":[{"listen":"prerequest","script":{"id":"ded199dd-b47c-4d90-844b-c4f03e7a6b98","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"d781da1e-6d34-473a-939f-1864060a5e9c","type":"text/javascript","exec":[""]}}],"_postman_id":"740c61db-093e-4c58-bdf3-877db064effd","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Report","item":[],"id":"6e98a247-d203-4b43-97cf-f5dc0e0f9fa5","_postman_id":"6e98a247-d203-4b43-97cf-f5dc0e0f9fa5","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Slack","item":[],"id":"e198fbec-2997-46f4-acba-1a682a49f1b9","_postman_id":"e198fbec-2997-46f4-acba-1a682a49f1b9","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Syslog Export","item":[],"id":"ea8fc035-8fad-4cd0-b99e-47a939a3fb8d","_postman_id":"ea8fc035-8fad-4cd0-b99e-47a939a3fb8d","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}}],"id":"b45ccac4-e845-403d-9d29-65e5b606f2a9","description":"

NOT COMPLETE (AWS Cloudwatches, Report, Slack, Syslog Export -- server down at 09:15)

\n","event":[{"listen":"prerequest","script":{"id":"cc6426be-c836-47ea-9772-e3a71bc4530d","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"562b78ae-a70b-4b48-af3d-fb9cecffbbd2","type":"text/javascript","exec":[""]}}],"_postman_id":"b45ccac4-e845-403d-9d29-65e5b606f2a9","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Event Watch","item":[{"name":"Event Buckets","item":[{"name":"List Event Buckets","event":[{"listen":"test","script":{"id":"c260bd06-a4b4-486e-b32a-f680b391c8b5","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"682be06a-e3ee-4312-8670-933e35844121","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"action\": \"list\"\n\t}\n}"},"url":"{{baseUrl}}/api/ds/bucket_config","description":"

Call to list (retrieve) all event buckets. Set the kargs.action field to \"list\".

Call to add an event bucket. Provide the following parameters:

{{ebName}}: name of the event bucket
{{ebDescription}}: a short description of the event bucket
{{ebKey}}: the key type for the event bucket: These types are:
- generic
- alert
- user
- account
- asset
- ip
- subnet
- application
- service
- device
\n
{{ebBucket}}: the bucket type of the event bucket. This is either \"system\" or \"user\"
{{ebEvent}}: the type of event the bucket will serve for. This is either \"metaflow\" or \"event\"
{{ebTotalEnabled}}: whether the event bucket should have Total enabled
{{ebTimeSlices}}: the frequency the event bucket should collect data
{{ebGroupBy}}: the parameters that the event bucket should group by
{{ebFields}}: the fields for the event bucket. Examples include: \"flows\", \"totalB\", \"rxB\", \"txB\", \"count\"
{{ebRules}}: the rules for the event bucket. See the Event Bucket Rules documentation for more information on this.

Make sure to set the kargs.action field to \"add\".

NoOTE: rules added by ID, NOT by name, when recorded in the Fluency system.

This call is similar to the Add Event Bucket call, but there are enough nuances to reserve it's own request section.

Provide the following parameters:

{{ebID}}: the unique ID of the event bucket
{{ebDescription}}: a short description of the event bucket
{{ebDisabled}}: option for disabling the event bucket
{{ebTotalEnabled}}: whether the event bucket should have Total enabled
{{ebBucket}}: the bucket type of the event bucket. This is either \"system\" or \"user\"
{{ebEvent}}: the type of event the bucket will serve for. This is either \"metaflow\" or \"event\"
{{ebKey}}: the key type for the event bucket: These types are:
- generic
- alert
- user
- account
- asset
- ip
- subnet
- application
- service
- device
\n
{{ebTimeSlices}}: the frequency the event bucket should collect data
{{ebFields}}: the fields for the event bucket. Examples include: \"flows\", \"totalB\", \"rxB\", \"txB\", \"count\"
{{ebGroupBy}}: the parameters that the event bucket should group by
{{ebAggregations}}: the event bucket's data aggregations
{{ebRules}}: the rules for the event bucket. See the Event Bucket Rules documentation for more information on this.
{{ebIndex}}: indexing of the event buckets

The {{updatedOn}} and {{createdOn}} parameters are automatically updated with ISODate representations of the current time (to the nearest millisecond). Make sure to set the kargs.action field to \"update\".

Call to delete an event bucket. Provide the unique ID of the event bucket for the {{ebID}} parameter, and set the kargs.action option to \"delete\".

Call to list all event bucket rules. Set the kargs.action field to \"list\".

Call to add an event bucket rule. Provide the following information to create the event bucket rule:

{{ebrName}}: the name of the event bucket rule
{{ebrDescription}}: a short description of the function of the event bucket rule
{{ebrRule}}: the type of the event bucket rule
{{ebrSeverity}}: the severity of alert the rule should send when it receives an event. The options for this parameter is \"info\", \"alert\", and \"critical\"
{{ebrKey}}: the keys of the event bucket rule to match
{{ebrField}}: any fields that the event bucket rule to match
{{ebrTopN}}: limits the number of results to return per page
{{ebrTimeSlices}}: frequency at which the rule collects data
{{ebrAnomalies}}: anomalies for the event bucket rule
{{ebrRates}}: rates for the event bucket rule

Make sure to set kargs.action to \"add\".

Developer's note: the interface on the severity field is a bit broken at the moment, also the json versions ruleType and severity fields aren't working at the moment (see below for current code for the but not working version)

    let ruleType = \"rate\";\n    switch (ruleType) {\n        case \"rate\":\n            pm.environment.set(\"ebrRule\", `{\n              \"label\": \"rate\",\n              \"value\": \"rate\"\n            }`);\n            break;\n        case \"anomaly\":\n            pm.environment.set(\"ebrRule\", `{\n              \"label\": \"anomaly\",\n              \"value\": \"anomaly\"\n            }`);\n            break;\n        default: break;\n    }\n    let severityLevel = \"info\"\n    switch (severityLevel) {\n        case \"info\":\n            pm.environment.set(\"ebrSeverity\", `{\n              \"label\": \"INFO\",\n              \"value\": \"INFO\"\n            }`);\n            break;\n        case \"alert\":\n            pm.environment.set(\"ebrSeverity\", `{\n              \"label\": \"ALERT\",\n              \"value\": \"ALERT\"\n            }`);\n            break;\n        case \"critical\":\n            pm.environment.set(\"ebrSeverity\", `{\n              \"label\": \"CRITICAL\",\n              \"value\": \"CRITICAL\"\n            }`);\n            break;\n        default: break;    \n    }\n

","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","bucket_rule_config"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[{"id":"c1795623-d0d0-4d51-a948-1266ce354804","name":"Add Event Bucket Rule","originalRequest":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"args\": {\n \"entry\": {\n \"name\": \"testing\",\n \"description\": \"testingtesting123\",\n \"ruleType\": \"rate\",\n \"severity\": \"INFO\",\n \"keySelector\": {\n \"matchAll\": true,\n \"include\": [],\n \"exclude\": []\n },\n \"fieldSelector\": {\n \"matchAll\": true,\n \"include\": [],\n \"exclude\": []\n },\n \"topKeys\": 0,\n \"timeSlices\": [],\n \"anomalies\": [],\n \"rates\": []\n }\n },\n \"action\": \"add\"\n }\n}"},"url":"{{baseUrl}}/api/ds/bucket_rule_config"},"_postman_previewlanguage":null,"header":null,"cookie":[],"responseTime":null,"body":null}],"_postman_id":"7253008a-1dd0-4790-ba61-10b302d32367"},{"name":"Update Event Bucket Rule","event":[{"listen":"test","script":{"id":"837a2781-1d76-4592-8e72-d893a5730cf2","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}},{"listen":"prerequest","script":{"id":"e3c1d798-fec7-47d2-9903-5607b65e9a95","exec":["function getISODate(unixtime){"," return \"\" + unixtime.getFullYear()+\"-\"+getString(unixtime.getMonth()+1)+\"-\"+getString(unixtime.getDate())+\"T\"+getString(unixtime.getHours())+\":\"+getString(unixtime.getMinutes())+\":\"+getString(unixtime.getSeconds())+\".\"+getString(unixtime.getMilliseconds())+\"Z\";","}","","function getString(num){"," if (num < 10) {"," return \"0\" + num;"," }"," else {"," return \"\" + num;"," }","}","","let date = getISODate(new Date(pm.globals.get(\"startTime\")));","","pm.environment.set(\"ebrID\", '\"5bd2fc2132a94439dda7581b\"');","pm.environment.set(\"ebrName\", '\"myEventBucketRule\"');","pm.environment.set(\"ebrDescription\", '\"a short description to go along with my EBR\"');","pm.environment.set(\"ebrRule\", '\"rate\"');","pm.environment.set(\"ebrSeverity\", '\"ALERT\"');","pm.environment.set(\"ebrTopN\", 20);","pm.environment.set(\"ebrKey\", `{"," \"matchAll\": true"," }`);","pm.environment.set(\"ebrField\", `{"," \"matchAll\": true"," }`);","pm.environment.set(\"ebrTimeSlices\", `["," \"1h\""," ]`);","pm.environment.set(\"ebrAnomalies\", `[]`);","pm.environment.set(\"ebrRates\", `[]`);","pm.environment.set(\"ebrInfo\", '\"\"');","pm.environment.set(\"updatedOn\", date);","pm.environment.set(\"createdOn\", date);","pm.environment.set(\"ebrIndex\", 2);",""],"type":"text/javascript"}}],"id":"daf91383-3fe6-49dd-a9ca-33a1f6d9ca9e","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"args\": {\n \"entry\": {\n \"_id\": {{ebrID}},\n \"name\": {{ebrName}},\n \"description\": {{ebrDescription}},\n \"ruleType\": {{ebrRule}},\n \"severity\": {{ebrSeverity}},\n \"topKeys\": {{ebrTopN}},\n \"keySelector\": {{ebrKey}},\n \"fieldSelector\": {{ebrField}},\n \"timeSlices\": {{ebrTimeSlices}},\n \"anomalies\": {{ebrAnomalies}},\n \"rates\": {{ebrRates}},\n \"updatedOn\": \"{{updatedOn}}\",\n \"createdOn\": \"{{createdOn}}\",\n \"info\": {{ebrInfo}},\n \"__index\": {{ebrIndex}}\n },\n \"id\": {{ebrID}}\n },\n \"action\": \"update\"\n }\n}"},"url":"{{baseUrl}}/api/ds/bucket_rule_config","description":"

Call to add an event bucket rule. Provide the following information to create the event bucket rule:

{{ebrID}}: the unique ID of the event bucket rule
{{ebrName}}: the name of the event bucket rule
{{ebrDescription}}: a short description of the function of the event bucket rule
{{ebrRule}}: the type of the event bucket rule
{{ebrSeverity}}: the severity of alert the rule should send when it receives an event. The options for this parameter is \"info\", \"alert\", and \"critical\"
{{ebrKey}}: the keys of the event bucket rule to match
{{ebrField}}: any fields that the event bucket rule to match
{{ebrTopN}}: limits the number of results to return per page
{{ebrTimeSlices}}: frequency at which the rule collects data
{{ebrAnomalies}}: anomalies for the event bucket rule
{{ebrRates}}: rates for the event bucket rule
{{ebrInfo}}: infomation about the event bucket rule
{{ebrIndex}}: the position of the event bucket rule on the list

Call to delete an event bucket. Provide the unique ID of the event bucket rule for the {{ebrID}} parameter, and set the kargs.action option to \"delete\".

Call to retrieve all flow watches. Set the kargs.action option to list.

Add or update Flow Watch, adjust kargs parameters accordingly:

Add:

kargs.action: add
kargs.args.entry.subnetGroup: subnet group the flow watch watches over (may not have any)
kargs.args.entry.subnets: subnets the flow watch includes (may not have multiple)

Update:

kargs.action: update
kargs.args.id: ID of flow watch
kargs.args.entry:
- kargs.args.entry._id: ID of flow watch (same as the one from kargs.args.id)
- kargs.args.entry.createdOn: date of creation (may not accurate at the moment) (when adding the date using the {{createdOn}}) variable, make sure to add quotes, otherwise Postman will not parse it!)
- kargs.args.entry.disabled
\n

possible watch types include: Subnet,\nIP,\nSubnet Group,\nSubnet and IP,

Many features on this section currently do not work, a notification is used temporarily while this part is in development

\n","event":[{"listen":"prerequest","script":{"id":"bff2af6b-2a33-4ec2-8d91-9cfb5178bbc0","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"014996ee-4bd9-438d-bc39-0b3e6700c4c6","type":"text/javascript","exec":[""]}}],"_postman_id":"e4444b2e-5025-4f23-924e-88ce087cf54e","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Risk Encoder","item":[{"name":"Mapping","item":[{"name":"List Risk Mappings","event":[{"listen":"test","script":{"id":"b1087103-bbfb-4d2c-8cbd-68ce9e962c26","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"d8f42d7d-6c5a-4ba1-99f7-23e28a78ad19","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"action\": \"list\",\n \"args\": {}\n }\n}"},"url":"{{baseUrl}}/api/ds/alert_risk_mapping","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","alert_risk_mapping"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"d8f42d7d-6c5a-4ba1-99f7-23e28a78ad19"},{"name":"Add/Update Risk Mapping","event":[{"listen":"test","script":{"id":"85a3c5aa-4573-4166-894c-914ed2dda5c9","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}},{"listen":"prerequest","script":{"id":"7c76ae20-4db9-4663-9911-83a3efba2bb4","exec":["pm.environment.set(\"rmName\", '\"myRiskMapping\"');","pm.environment.set(\"rmRisk\", '\"ALERT_SNORT_TROJAN\"');","pm.environment.set(\"rmDescription\", '\"myRiskMappingDescription\"');"],"type":"text/javascript"}}],"id":"b25c9e2e-1790-437c-a5c1-65a5d64f5466","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"action\": \"add\",\n \"args\": {\n \"entry\": {\n \"sid\": {{rmName}},\n \"risk\": {{rmRisk}},\n \"description\": {{rmDescription}}\n }\n }\n }\n}"},"url":"{{baseUrl}}/api/ds/alert_risk_mapping","description":"

Add or update risk mapping, note that the kargs parameters are the same for both

Risk types:
ALERT_SNORT_TROJAN,\nALERT_SNORT_POLICY,\nALERT_NORMAL,\nALERT_HIGH_CONFIDENCE,\nALERT_END_POINT,

Call to add a risk filter for both whitelist and domain whitelist. For domain whitelist addition, add the kargs.args.domain parameter value.

Call to create or update an API Policy. Adjust kargs.action accordingly:

Create: \"create\"
Update: \"update\"

Also make sure to adjust the kargs.args fields as desired

Call to get or delete an API Policy. Adjust kargs.args accordingly:

Get: \"get\"
Delete: \"delete\"

List the audit events.

These routines that handle audit.

\n","_postman_id":"66090809-65a9-40a1-9241-8db2b4ec47ff","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Data Policies","item":[{"name":"Data Policy DAO","event":[{"listen":"test","script":{"id":"2a253f44-5ddb-450a-b880-aebf2e008e02","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"ff2a5dd7-e620-44d5-b4c7-50ab494dd91c","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"action\": \"list\"\n\t}\n}"},"url":"{{baseUrl}}/api/auth/dataPolicyDao","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","auth","dataPolicyDao"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"ff2a5dd7-e620-44d5-b4c7-50ab494dd91c"},{"name":"Create/Update Data Policy","event":[{"listen":"test","script":{"id":"55dd9c93-1257-4993-8a5a-26b2a292c128","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}},{"listen":"prerequest","script":{"id":"4c1330cd-d351-4410-bc93-db57df371f94","exec":["pm.environment.set(\"kAction\", '\"create\"');","pm.environment.set(\"dpName\", '\"myDataPolicyName\"');","pm.environment.set(\"dpDescription\", '\"a short description for this data policy\"');","pm.environment.set(\"dpTypes\", `["," {"," \"dataType\": \"event\","," \"fields\": {"," \"include\": ["," \"@fields.ApplicationDisplayName\""," ],"," \"exclude\": ["," \"@fields.ClientIP\""," ],"," \"unmask\": [],"," \"unmaskEntity\": []"," },"," \"filter\": {"," \"filter\": \"\","," \"queryString\": \"myDataPolicyQuery\""," }"," }"," ]`);"],"type":"text/javascript"}}],"id":"37ecfa8f-c9c4-43fd-ace2-151678507221","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","type":"text","value":"{{fluencytoken}}"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"action\": {{kAction}},\n \"args\": {\n \"entry\": {\n \"name\": {{dpName}},\n \"description\": {{dpDescription}},\n \"dataTypes\": {{dpTypes}}\n }\n }\n }\n}"},"url":"{{baseUrl}}/api/auth/dataPolicyDao","description":"

Add (create) or edit (update) a data policy, adjust kargs.action accordingly:

Create: \"create\"
Update: \"update\"

Remember to modify the kargs.args fields as well

Call that adds or updates a role for data overview. Adjust kargs.action accordingly:

Add: \"create\"
Update: \"update\"

Choose API Policies and Data Policies from the existing ones in the database, or create your own depending on your permissions. Examples of API Policies:

application_admin\napplication_review\nartifact_filter_admin\nartifact_filter_review\nasset_admin\nasset_review\naudit\ncollector_admin\ncollector_review\ndata_admin\ndata_review\nevent_watch_admin\nevent_watch_review\nexchange_admin\nexchange_board_admin\nexchange_board_review\nexchange_review\nhistogram_admin\nhistogram_review\nids_rule_admin\nids_rule_review\nimport_admin\nimport_review\nintegration_admin\nintegration_review\nnotification_admin\nnotification_review\nreport_admin\nreport_review\nreputation_admin\nreputation_review\nrisk_event_admin\nrisk_event_review\nsaved_search_admin\nsaved_search_review\nsubnet_admin\nsubnet_review\nsummary_admin\nsummary_review\nuser \n

Examples of data policies

data_admin\ndata_review\noffice365_admin\nsuricata_admin\n

Call that deletes a role

Call to create a new user in the system. Note that the code listed here is just an example user addition, and customizations can be made (e.g. RADIUS, OAuth permissions)

Retrieves the selected user's information by username

This call updates a user's information. Some options are not able to be edited after initial creation of user.

This call suspends a user's account, which disables their usage of the product.

Deletes a user from the system

Calls that gets a list of Tokens

Deletes an API token, change the name of the API token aaccordingly

Management of API tokens.

\n","_postman_id":"f11e003a-8f1b-4b1f-8ecb-5c9a08301f53","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}}],"id":"60320a9c-ef02-4801-8df4-4c3bf14fbbed","_postman_id":"60320a9c-ef02-4801-8df4-4c3bf14fbbed","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Database","item":[{"name":"Data Schema","item":[{"name":"Metaflow DB Search","event":[{"listen":"prerequest","script":{"id":"6151605f-9c9e-41f6-8db3-e38c265a004f","exec":["pm.environment.set(\"searchQuery\", '\"\"');"],"type":"text/javascript"}},{"listen":"test","script":{"id":"e7954f81-6ed0-40ec-b289-44b46817be19","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"81a57f11-9f4f-4e8f-870e-4bdad2d3cd75","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","description":"","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"dataType\": \"metaflow\",\n \"query\": {{searchQuery}}\n }\n}"},"url":"{{baseUrl}}/api/ds/schema_search","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","schema_search"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"81a57f11-9f4f-4e8f-870e-4bdad2d3cd75"},{"name":"Event DB Search","event":[{"listen":"prerequest","script":{"id":"9407aa86-be8f-4e28-b253-751a51357686","exec":["pm.environment.set(\"searchQuery\", '\"\"');"],"type":"text/javascript"}},{"listen":"test","script":{"id":"22ec590b-db90-4cf1-a3eb-94f3c702e010","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"c6dfd432-a607-44aa-8bcc-afa725449636","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"dataType\": \"event\",\n \"query\": {{searchQuery}}\n }\n}"},"url":"{{baseUrl}}/api/ds/schema_search","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","schema_search"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"c6dfd432-a607-44aa-8bcc-afa725449636"},{"name":"Field Schemas","event":[{"listen":"prerequest","script":{"id":"b56908da-d3b0-43eb-a03d-f4f4f182b67e","exec":["pm.environment.set(\"searchQuery\", '\"\"');"],"type":"text/javascript"}},{"listen":"test","script":{"id":"854861a4-2243-4f5e-b4de-fe3ed58b53ac","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"862360e1-e6a5-4bb9-a68f-def4ba630fbe","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\"kargs\":{\"dataType\":\"event\",\"query\":\"\"}}"},"url":"{{baseUrl}}/api/ds/schema_field_search","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","schema_field_search"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"862360e1-e6a5-4bb9-a68f-def4ba630fbe"}],"id":"361c166c-484e-4b5f-9309-cb4c3111e375","_postman_id":"361c166c-484e-4b5f-9309-cb4c3111e375","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"DB Segment","item":[{"name":"List Segments","event":[{"listen":"test","script":{"id":"490df221-2d85-4973-99df-24db821df5b3","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"c5e099cd-6d4e-46d5-a67a-d0c45f5a8ec2","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\"kargs\":{}}"},"url":"{{baseUrl}}/api/ds/list_segment","description":"

List all segments stored in database

Get Segment Schema for specified schema

Check status of databases

\n","_postman_id":"e9764c4e-01db-41d2-8085-f6550a41e7eb","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"DB Task","item":[{"name":"List All DB Tasks","event":[{"listen":"test","script":{"id":"2351c134-255e-410c-94ef-54aa36fa6311","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"d506a84c-7dd6-4ccf-b31c-72a116f6e372","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\"kargs\":{}}"},"url":"{{baseUrl}}/api/ds/list_task","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","list_task"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"d506a84c-7dd6-4ccf-b31c-72a116f6e372"},{"name":"Get DB Task","event":[{"listen":"prerequest","script":{"id":"09f824e2-a597-4946-acbc-c372f4956600","exec":["pm.environment.set(\"taskID\", 22);"],"type":"text/javascript"}},{"listen":"test","script":{"id":"d02b3e6d-394b-4616-9d8c-f91f7cf374c8","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"c08171a4-3928-4aa4-ad24-b18cd322c78b","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"id\": {{taskID}}\n }\n}"},"url":"{{baseUrl}}/api/ds/get_task","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","get_task"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"c08171a4-3928-4aa4-ad24-b18cd322c78b"},{"name":"Delete DB Task","event":[{"listen":"prerequest","script":{"id":"457f533e-a9ee-47e6-b8fb-7fad4338b136","exec":["pm.environment.set(\"taskID\", 22);"],"type":"text/javascript"}},{"listen":"test","script":{"id":"7f94ce9d-1050-4f91-947d-c3643a6add66","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"b2ac85bd-caf0-411f-ab75-64122f2d27bf","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"id\": {{taskID}}\n }\n}"},"url":"{{baseUrl}}/api/ds/delete_task","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","delete_task"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"b2ac85bd-caf0-411f-ab75-64122f2d27bf"}],"id":"07384a5c-f73b-42ed-afc1-09af8487f21c","_postman_id":"07384a5c-f73b-42ed-afc1-09af8487f21c","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"DB Search","item":[{"name":"Aladdin Search","event":[{"listen":"prerequest","script":{"id":"1f969fe6-40a6-47d8-917f-0a4bdc6cf0af","exec":["pm.environment.set(\"fetchOffset\", 0);","pm.environment.set(\"fetchLimit\", 20);"],"type":"text/javascript"}},{"listen":"test","script":{"id":"bc2c0a02-6014-493d-89c2-c0d65a437126","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}}],"id":"2a6ed0b3-7840-49ee-9164-9a210bf633f4","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"kargs\": {\n\t\t\"fetchOffset\": {{fetchOffset}},\n\t\t\"fetchLimit\": {{fetchLimit}},\n\t\t\"type\": \"LIST\",\n\t\t\"resource\": \"SearchTask\"\n\t}\n}"},"url":"{{baseUrl}}/api/ds/aladdin_dao","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","aladdin_dao"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[{"id":"bfb4f29b-0dfc-457c-afcc-b12c22518907","name":"Aladdin Search","originalRequest":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"fetchOffset\": 0,\n \"fetchLimit\": 20,\n \"type\": \"LIST\",\n \"resource\": \"SearchTask\"\n }\n}"},"url":"{{baseUrl}}/api/ds/aladdin_dao"},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"Date","value":"Thu, 01 Aug 2019 15:01:20 GMT"},{"key":"Content-Type","value":"application/json; charset=utf-8"},{"key":"Transfer-Encoding","value":"chunked"},{"key":"Connection","value":"keep-alive"},{"key":"Content-Encoding","value":"gzip"},{"key":"Vary","value":"Accept-Encoding"}],"cookie":[],"responseTime":null,"body":"{\n \"verdict\": \"OK\",\n \"response\": {\n \"data\": [\n {\n \"id\": \"5d41ee9088c99c62a075e492\",\n \"sid\": 855,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-31T19:40:00.055333358Z\",\n \"completedOn\": \"2019-07-31T19:40:29.645231679Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d41ee9088c99c62a075e492\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-07-31T19:40:00.063435687Z\",\n \"end\": \"2019-07-31T19:40:00.531253626Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d41ee9088c99c62a075e492\",\n \"instanceID\": \"10.1.200.241:20190721;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 5600958;\",\n \"start\": \"2019-07-31T19:40:00.531262089Z\",\n \"end\": \"2019-07-31T19:40:27.549654637Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d41ee9088c99c62a075e492:i-03cb627a149d57cee\",\n \"instanceID\": \"10.1.200.241:20190721;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-31T19:40:29Z\",\n \"end\": \"2019-07-31T19:40:28Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d41ee9088c99c62a075e492\",\n \"instanceID\": \"10.1.200.241:20190721;\",\n \"name\": \"Search\",\n \"message\": \"Event count 5600958;\",\n \"start\": \"2019-07-31T19:40:29.562641322Z\",\n \"end\": \"2019-07-31T19:40:29.637116016Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d41ee9088c99c62a075e492\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-31T19:40:29.637215138Z\",\n \"end\": \"2019-07-31T19:40:30.637215138Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d41886788c99c62a075e483\",\n \"sid\": 854,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-31T12:24:07.705882986Z\",\n \"completedOn\": \"2019-07-31T12:25:05.689138221Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d41886788c99c62a075e483\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-31T12:24:07.711110037Z\",\n \"end\": \"2019-07-31T12:24:08.761397582Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d41886788c99c62a075e483\",\n \"instanceID\": \"10.1.103.21:20190707;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-31T12:24:08.761406757Z\",\n \"end\": \"2019-07-31T12:24:59.789156751Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d41886788c99c62a075e483:i-05d079443240ec35f\",\n \"instanceID\": \"10.1.103.21:20190707;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 103.6 MBS size: 178MB, duration: 1.7 seconds \",\n \"start\": \"2019-07-31T12:25:01Z\",\n \"end\": \"2019-07-31T12:25:01Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d41886788c99c62a075e483:i-05d079443240ec35f\",\n \"instanceID\": \"10.1.103.21:20190707;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 439.3 MBS size: 710MB, duration: 1.6 seconds \",\n \"start\": \"2019-07-31T12:25:02Z\",\n \"end\": \"2019-07-31T12:25:03Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d41886788c99c62a075e483:i-05d079443240ec35f\",\n \"instanceID\": \"10.1.103.21:20190707;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-31T12:25:04Z\",\n \"end\": \"2019-07-31T12:25:04Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d41886788c99c62a075e483\",\n \"instanceID\": \"10.1.103.21:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-31T12:25:05.616884314Z\",\n \"end\": \"2019-07-31T12:25:05.682074255Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d41886788c99c62a075e483\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-31T12:25:05.682173313Z\",\n \"end\": \"2019-07-31T12:25:06.682173313Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d3d2e6f88c99c62a075e462\",\n \"sid\": 853,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-28T05:11:11.711183168Z\",\n \"completedOn\": \"2019-07-28T05:11:43.569146272Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d3d2e6f88c99c62a075e462\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-28T05:11:11.715242964Z\",\n \"end\": \"2019-07-28T05:11:12.645187752Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d3d2e6f88c99c62a075e462\",\n \"instanceID\": \"10.1.200.241:20190721;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 5600958;\",\n \"start\": \"2019-07-28T05:11:12.645196859Z\",\n \"end\": \"2019-07-28T05:11:39.683852009Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d3d2e6f88c99c62a075e462:i-03cb627a149d57cee\",\n \"instanceID\": \"10.1.200.241:20190721;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 165.9 MBS size: 117MB, duration: 0.7 seconds \",\n \"start\": \"2019-07-28T05:11:40Z\",\n \"end\": \"2019-07-28T05:11:40Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d3d2e6f88c99c62a075e462:i-03cb627a149d57cee\",\n \"instanceID\": \"10.1.200.241:20190721;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 384.0 MBS size: 359MB, duration: 0.9 seconds \",\n \"start\": \"2019-07-28T05:11:41Z\",\n \"end\": \"2019-07-28T05:11:41Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d3d2e6f88c99c62a075e462:i-03cb627a149d57cee\",\n \"instanceID\": \"10.1.200.241:20190721;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-28T05:11:42Z\",\n \"end\": \"2019-07-28T05:11:42Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d3d2e6f88c99c62a075e462\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-07-28T05:11:43.552770025Z\",\n \"end\": \"2019-07-28T05:11:44.552770025Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d3d2e3988c99c62a075e460\",\n \"sid\": 852,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-28T05:10:17.820663311Z\",\n \"completedOn\": \"2019-07-28T05:11:11.708696536Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d3d2e3988c99c62a075e460\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-28T05:10:17.825800317Z\",\n \"end\": \"2019-07-28T05:10:18.83287616Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d3d2e3988c99c62a075e460\",\n \"instanceID\": \"10.1.113.221:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-28T05:10:18.832885886Z\",\n \"end\": \"2019-07-28T05:11:09.85286588Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d3d2e3988c99c62a075e460:i-028281e6cc0bffc5c\",\n \"instanceID\": \"10.1.113.221:overflow;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 0.0 MBS size: 0MB, duration: 0.1 seconds \",\n \"start\": \"2019-07-28T05:11:10Z\",\n \"end\": \"2019-07-28T05:11:09Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d3d2e3988c99c62a075e460:i-028281e6cc0bffc5c\",\n \"instanceID\": \"10.1.113.221:overflow;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 0.0 MBS size: 0MB, duration: 0.2 seconds \",\n \"start\": \"2019-07-28T05:11:11Z\",\n \"end\": \"2019-07-28T05:11:10Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d3d2e3988c99c62a075e460:i-028281e6cc0bffc5c\",\n \"instanceID\": \"10.1.113.221:overflow;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-28T05:11:11Z\",\n \"end\": \"2019-07-28T05:11:10Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d3d2e3988c99c62a075e460\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-07-28T05:11:11.703012533Z\",\n \"end\": \"2019-07-28T05:11:12.703012533Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d39aeef88c99c62a075e29d\",\n \"sid\": 851,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-25T13:30:23.196444877Z\",\n \"completedOn\": \"2019-07-25T13:30:23.317885749Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d39aeef88c99c62a075e29d\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Error\",\n \"message\": \"MissingParameter: The request must contain the parameter ImageId\\n\\tstatus code: 400, request id: 3093c377-d196-4b75-9220-f4d6c09db39a\",\n \"start\": \"2019-07-25T13:30:23.314187563Z\",\n \"end\": \"2019-07-25T13:30:24.314187563Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"cancelled\"\n },\n {\n \"id\": \"5d33f3b688c99c62a075e24f\",\n \"sid\": 850,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-21T05:10:14.491827523Z\",\n \"completedOn\": \"2019-07-21T05:11:09.979887669Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d33f3b688c99c62a075e24f\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-21T05:10:14.496678471Z\",\n \"end\": \"2019-07-21T05:10:15.447374255Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d33f3b688c99c62a075e24f\",\n \"instanceID\": \"10.1.66.135:20190714;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 5901552;\",\n \"start\": \"2019-07-21T05:10:15.447383503Z\",\n \"end\": \"2019-07-21T05:11:06.468198383Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d33f3b688c99c62a075e24f:i-0d0879faa08b4f261\",\n \"instanceID\": \"10.1.66.135:20190714;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 214.5 MBS size: 113MB, duration: 0.5 seconds \",\n \"start\": \"2019-07-21T05:11:07Z\",\n \"end\": \"2019-07-21T05:11:07Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d33f3b688c99c62a075e24f:i-0d0879faa08b4f261\",\n \"instanceID\": \"10.1.66.135:20190714;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 420.1 MBS size: 357MB, duration: 0.8 seconds \",\n \"start\": \"2019-07-21T05:11:07Z\",\n \"end\": \"2019-07-21T05:11:07Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d33f3b688c99c62a075e24f:i-0d0879faa08b4f261\",\n \"instanceID\": \"10.1.66.135:20190714;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-21T05:11:08Z\",\n \"end\": \"2019-07-21T05:11:08Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d33f3b688c99c62a075e24f\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-07-21T05:11:09.974520985Z\",\n \"end\": \"2019-07-21T05:11:10.974520985Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d308fcb88c99c62a075e233\",\n \"sid\": 849,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-18T15:27:07.271895445Z\",\n \"completedOn\": \"2019-07-18T15:27:07.329379165Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d308fcb88c99c62a075e233\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:27:07.278259943Z\",\n \"end\": \"2019-07-18T15:27:07.325642221Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308fcb88c99c62a075e233\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-18T15:27:07.325760022Z\",\n \"end\": \"2019-07-18T15:27:08.325760022Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d308fc388c99c62a075e232\",\n \"sid\": 848,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-18T15:26:59.28368376Z\",\n \"completedOn\": \"2019-07-18T15:26:59.353964849Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d308fc388c99c62a075e232\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:26:59.290259572Z\",\n \"end\": \"2019-07-18T15:26:59.351883495Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308fc388c99c62a075e232\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-18T15:26:59.351975855Z\",\n \"end\": \"2019-07-18T15:27:00.351975855Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d308f7d88c99c62a075e231\",\n \"sid\": 847,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-18T15:25:49.132096682Z\",\n \"completedOn\": \"2019-07-18T15:25:49.225154254Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d308f7d88c99c62a075e231\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:25:49.138120759Z\",\n \"end\": \"2019-07-18T15:25:49.22227229Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308f7d88c99c62a075e231\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-18T15:25:49.222357045Z\",\n \"end\": \"2019-07-18T15:25:50.222357045Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d308f6e88c99c62a075e230\",\n \"sid\": 846,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-18T15:25:34.322340282Z\",\n \"completedOn\": \"2019-07-18T15:25:34.444997672Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d308f6e88c99c62a075e230\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:25:34.328333674Z\",\n \"end\": \"2019-07-18T15:25:34.440151182Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308f6e88c99c62a075e230\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-18T15:25:34.440244208Z\",\n \"end\": \"2019-07-18T15:25:35.440244208Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d308f4d88c99c62a075e22f\",\n \"sid\": 845,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-18T15:25:01.476891466Z\",\n \"completedOn\": \"2019-07-18T15:25:01.571836685Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d308f4d88c99c62a075e22f\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:25:01.482948586Z\",\n \"end\": \"2019-07-18T15:25:01.568994983Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308f4d88c99c62a075e22f\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-18T15:25:01.569108498Z\",\n \"end\": \"2019-07-18T15:25:02.569108498Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d308f2e88c99c62a075e22e\",\n \"sid\": 844,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-18T15:24:30.933344994Z\",\n \"completedOn\": \"2019-07-18T15:24:31.122726724Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d308f2e88c99c62a075e22e\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:24:30.939639893Z\",\n \"end\": \"2019-07-18T15:24:31.117780109Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308f2e88c99c62a075e22e\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-18T15:24:31.117858319Z\",\n \"end\": \"2019-07-18T15:24:32.117858319Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d308f1188c99c62a075e22d\",\n \"sid\": 843,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-18T15:24:01.164551966Z\",\n \"completedOn\": \"2019-07-18T15:24:01.232442806Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d308f1188c99c62a075e22d\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:24:01.171076461Z\",\n \"end\": \"2019-07-18T15:24:01.22971954Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308f1188c99c62a075e22d\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-18T15:24:01.22981352Z\",\n \"end\": \"2019-07-18T15:24:02.22981352Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d308f0788c99c62a075e22c\",\n \"sid\": 842,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-18T15:23:51.461960341Z\",\n \"completedOn\": \"2019-07-18T15:23:51.502338268Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d308f0788c99c62a075e22c\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:23:51.468072204Z\",\n \"end\": \"2019-07-18T15:23:51.49974944Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308f0788c99c62a075e22c\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-18T15:23:51.499850691Z\",\n \"end\": \"2019-07-18T15:23:52.499850691Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d308ed888c99c62a075e22b\",\n \"sid\": 841,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-18T15:23:04.799528587Z\",\n \"completedOn\": \"2019-07-18T15:23:34.630625271Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d308ed888c99c62a075e22b\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-07-18T15:23:04.806874642Z\",\n \"end\": \"2019-07-18T15:23:05.24479157Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308ed888c99c62a075e22b\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:23:05.24480822Z\",\n \"end\": \"2019-07-18T15:23:32.26333895Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308ed888c99c62a075e22b:i-099c40e7dc1e31273\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-18T15:23:34Z\",\n \"end\": \"2019-07-18T15:23:33Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308ed888c99c62a075e22b\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-18T15:23:34.273936129Z\",\n \"end\": \"2019-07-18T15:23:34.625275592Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d308ed888c99c62a075e22b\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-18T15:23:34.625376704Z\",\n \"end\": \"2019-07-18T15:23:35.625376704Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2e5054b49ea50b238d26e7\",\n \"sid\": 840,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-16T22:31:48.054301829Z\",\n \"completedOn\": \"2019-07-16T22:31:48.166379647Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2e5054b49ea50b238d26e7\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-16T22:31:48.061053312Z\",\n \"end\": \"2019-07-16T22:31:48.16223997Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2e5054b49ea50b238d26e7\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-16T22:31:48.162327461Z\",\n \"end\": \"2019-07-16T22:31:49.162327461Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2e4f29b49ea50b238d26e6\",\n \"sid\": 839,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-16T22:26:49.509058069Z\",\n \"completedOn\": \"2019-07-16T22:27:19.434730615Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2e4f29b49ea50b238d26e6\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-07-16T22:26:49.515366119Z\",\n \"end\": \"2019-07-16T22:26:49.936518754Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2e4f29b49ea50b238d26e6\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-16T22:26:49.936534171Z\",\n \"end\": \"2019-07-16T22:27:16.951849173Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2e4f29b49ea50b238d26e6:i-099c40e7dc1e31273\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-16T22:27:18Z\",\n \"end\": \"2019-07-16T22:27:17Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2e4f29b49ea50b238d26e6\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-16T22:27:18.962486089Z\",\n \"end\": \"2019-07-16T22:27:19.428875994Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2e4f29b49ea50b238d26e6\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-16T22:27:19.428982816Z\",\n \"end\": \"2019-07-16T22:27:20.428982816Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2b08f28626fa50a2ebab4a\",\n \"sid\": 838,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-14T10:50:26.483085423Z\",\n \"completedOn\": \"2019-07-14T10:50:55.910250667Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab4a\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-14T10:50:55.812550649Z\",\n \"end\": \"2019-07-14T10:50:55.904659629Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab4a\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-14T10:50:55.904741234Z\",\n \"end\": \"2019-07-14T10:50:56.904741234Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2b08f28626fa50a2ebab49\",\n \"sid\": 837,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-14T10:50:26.278285298Z\",\n \"completedOn\": \"2019-07-14T10:50:55.872989386Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab49\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-14T10:50:55.812371688Z\",\n \"end\": \"2019-07-14T10:50:55.866738019Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab49\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-14T10:50:55.866829859Z\",\n \"end\": \"2019-07-14T10:50:56.866829859Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2b08f28626fa50a2ebab48\",\n \"sid\": 836,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-14T10:50:26.263803188Z\",\n \"completedOn\": \"2019-07-14T10:50:55.88002596Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab48\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-14T10:50:55.81266541Z\",\n \"end\": \"2019-07-14T10:50:55.876965003Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab48\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-14T10:50:55.877035975Z\",\n \"end\": \"2019-07-14T10:50:56.877035975Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2b08f28626fa50a2ebab47\",\n \"sid\": 835,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-14T10:50:26.2542048Z\",\n \"completedOn\": \"2019-07-14T10:50:55.81231112Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab47\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-07-14T10:50:26.263642531Z\",\n \"end\": \"2019-07-14T10:50:26.650657778Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab47\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-14T10:50:26.650671669Z\",\n \"end\": \"2019-07-14T10:50:53.674283881Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab47:i-099c40e7dc1e31273\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-14T10:50:55Z\",\n \"end\": \"2019-07-14T10:50:54Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab47\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-14T10:50:55.68947535Z\",\n \"end\": \"2019-07-14T10:50:55.806824406Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2b08f28626fa50a2ebab47\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-14T10:50:55.806924711Z\",\n \"end\": \"2019-07-14T10:50:56.806924711Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2ab9398626fa50a2ebab43\",\n \"sid\": 834,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-14T05:10:17.783619447Z\",\n \"completedOn\": \"2019-07-14T05:11:14.360473632Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2ab9398626fa50a2ebab43\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-14T05:10:17.789256724Z\",\n \"end\": \"2019-07-14T05:10:18.847432257Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2ab9398626fa50a2ebab43\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13997448;\",\n \"start\": \"2019-07-14T05:10:18.847444916Z\",\n \"end\": \"2019-07-14T05:11:09.873003276Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2ab9398626fa50a2ebab43:i-099c40e7dc1e31273\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 306.1 MBS size: 178MB, duration: 0.6 seconds \",\n \"start\": \"2019-07-14T05:11:11Z\",\n \"end\": \"2019-07-14T05:11:10Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d2ab9398626fa50a2ebab43:i-099c40e7dc1e31273\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 490.0 MBS size: 710MB, duration: 1.4 seconds \",\n \"start\": \"2019-07-14T05:11:10Z\",\n \"end\": \"2019-07-14T05:11:11Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d2ab9398626fa50a2ebab43:i-099c40e7dc1e31273\",\n \"instanceID\": \"10.1.82.92:20190707;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-14T05:11:13Z\",\n \"end\": \"2019-07-14T05:11:13Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2ab9398626fa50a2ebab43\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-07-14T05:11:14.3543505Z\",\n \"end\": \"2019-07-14T05:11:15.3543505Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c6d8b49ea55cb2fcdddd\",\n \"sid\": 833,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:54:48.356162598Z\",\n \"completedOn\": \"2019-07-09T16:54:48.418773294Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c6d8b49ea55cb2fcdddd\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:54:48.36185634Z\",\n \"end\": \"2019-07-09T16:54:48.415011803Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c6d8b49ea55cb2fcdddd\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:54:48.415106845Z\",\n \"end\": \"2019-07-09T16:54:49.415106845Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c6c7b49ea55cb2fcddda\",\n \"sid\": 832,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:54:31.092981401Z\",\n \"completedOn\": \"2019-07-09T16:54:31.157690441Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c6c7b49ea55cb2fcddda\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:54:31.099055582Z\",\n \"end\": \"2019-07-09T16:54:31.152773493Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c6c7b49ea55cb2fcddda\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:54:31.152882823Z\",\n \"end\": \"2019-07-09T16:54:32.152882823Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c454b49ea55cb2fcddd9\",\n \"sid\": 831,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:44:04.932558968Z\",\n \"completedOn\": \"2019-07-09T16:44:04.996752334Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c454b49ea55cb2fcddd9\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:44:04.938925407Z\",\n \"end\": \"2019-07-09T16:44:04.992655986Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c454b49ea55cb2fcddd9\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:44:04.99275388Z\",\n \"end\": \"2019-07-09T16:44:05.99275388Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c442b49ea55cb2fcddd8\",\n \"sid\": 830,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:43:46.439966828Z\",\n \"completedOn\": \"2019-07-09T16:43:46.622668337Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c442b49ea55cb2fcddd8\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:43:46.445690612Z\",\n \"end\": \"2019-07-09T16:43:46.619910237Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c442b49ea55cb2fcddd8\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:43:46.620012852Z\",\n \"end\": \"2019-07-09T16:43:47.620012852Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c41cb49ea55cb2fcddd5\",\n \"sid\": 829,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:43:08.516357594Z\",\n \"completedOn\": \"2019-07-09T16:43:08.563438504Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c41cb49ea55cb2fcddd5\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-09T16:43:08.524762894Z\",\n \"end\": \"2019-07-09T16:43:08.534116635Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c41cb49ea55cb2fcddd5\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:43:08.524706328Z\",\n \"end\": \"2019-07-09T16:43:08.560881854Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c41cb49ea55cb2fcddd5\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:43:08.56097699Z\",\n \"end\": \"2019-07-09T16:43:09.56097699Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c103b49ea55cb2fcddd4\",\n \"sid\": 828,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:29:55.437789226Z\",\n \"completedOn\": \"2019-07-09T16:29:55.49041693Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c103b49ea55cb2fcddd4\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-09T16:29:55.448743457Z\",\n \"end\": \"2019-07-09T16:29:55.462691058Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c103b49ea55cb2fcddd4\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:29:55.448580318Z\",\n \"end\": \"2019-07-09T16:29:55.48765861Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c103b49ea55cb2fcddd4\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:29:55.487733889Z\",\n \"end\": \"2019-07-09T16:29:56.487733889Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c0fcb49ea55cb2fcddd3\",\n \"sid\": 827,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:29:48.223256771Z\",\n \"completedOn\": \"2019-07-09T16:29:48.274137788Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c0fcb49ea55cb2fcddd3\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-09T16:29:48.232213821Z\",\n \"end\": \"2019-07-09T16:29:48.241307609Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c0fcb49ea55cb2fcddd3\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:29:48.232353367Z\",\n \"end\": \"2019-07-09T16:29:48.271198468Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c0fcb49ea55cb2fcddd3\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:29:48.271303409Z\",\n \"end\": \"2019-07-09T16:29:49.271303409Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c0f4b49ea55cb2fcddd2\",\n \"sid\": 826,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:29:40.889602476Z\",\n \"completedOn\": \"2019-07-09T16:29:40.940524129Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c0f4b49ea55cb2fcddd2\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-09T16:29:40.897875186Z\",\n \"end\": \"2019-07-09T16:29:40.906138516Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c0f4b49ea55cb2fcddd2\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:29:40.897860534Z\",\n \"end\": \"2019-07-09T16:29:40.937663Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c0f4b49ea55cb2fcddd2\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:29:40.937743944Z\",\n \"end\": \"2019-07-09T16:29:41.937743944Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c092b49ea55cb2fcddd1\",\n \"sid\": 825,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:28:02.064754921Z\",\n \"completedOn\": \"2019-07-09T16:28:02.198566895Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c092b49ea55cb2fcddd1\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-09T16:28:02.071894721Z\",\n \"end\": \"2019-07-09T16:28:02.081168619Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c092b49ea55cb2fcddd1\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:28:02.07208876Z\",\n \"end\": \"2019-07-09T16:28:02.193727462Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c092b49ea55cb2fcddd1\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:28:02.193837717Z\",\n \"end\": \"2019-07-09T16:28:03.193837717Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c046b49ea55cb2fcddd0\",\n \"sid\": 824,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:26:46.830930423Z\",\n \"completedOn\": \"2019-07-09T16:26:46.917789345Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c046b49ea55cb2fcddd0\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-09T16:26:46.838687907Z\",\n \"end\": \"2019-07-09T16:26:46.848185706Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c046b49ea55cb2fcddd0\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:26:46.838655083Z\",\n \"end\": \"2019-07-09T16:26:46.913758631Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c046b49ea55cb2fcddd0\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:26:46.913852274Z\",\n \"end\": \"2019-07-09T16:26:47.913852274Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24c022b49ea55cb2fcddcf\",\n \"sid\": 823,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:26:10.796962475Z\",\n \"completedOn\": \"2019-07-09T16:26:10.896540888Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24c022b49ea55cb2fcddcf\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-09T16:26:10.804325571Z\",\n \"end\": \"2019-07-09T16:26:10.814585112Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c022b49ea55cb2fcddcf\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:26:10.804494112Z\",\n \"end\": \"2019-07-09T16:26:10.89336036Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24c022b49ea55cb2fcddcf\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:26:10.893455029Z\",\n \"end\": \"2019-07-09T16:26:11.893455029Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d24bfe4b49ea55cb2fcddcd\",\n \"sid\": 822,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-09T16:25:08.258053202Z\",\n \"completedOn\": \"2019-07-09T16:26:01.443424Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-07-09T16:25:08.263552658Z\",\n \"end\": \"2019-07-09T16:25:08.862360876Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-09T16:25:08.26373105Z\",\n \"end\": \"2019-07-09T16:25:09.301627111Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:25:08.86237453Z\",\n \"end\": \"2019-07-09T16:25:35.878838319Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd:i-05d4a3184d081f353\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-09T16:25:37Z\",\n \"end\": \"2019-07-09T16:25:36Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-09T16:25:37.88847903Z\",\n \"end\": \"2019-07-09T16:25:39.249410406Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-09T16:25:09.301635531Z\",\n \"end\": \"2019-07-09T16:26:00.320275279Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd:i-07f402d629edb8d0b\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 0.0 MBS size: 0MB, duration: 0.1 seconds \",\n \"start\": \"2019-07-09T16:26:01Z\",\n \"end\": \"2019-07-09T16:26:00Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd:i-07f402d629edb8d0b\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 0.0 MBS size: 0MB, duration: 0.0 seconds \",\n \"start\": \"2019-07-09T16:26:01Z\",\n \"end\": \"2019-07-09T16:26:00Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd:i-07f402d629edb8d0b\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-09T16:26:01Z\",\n \"end\": \"2019-07-09T16:26:00Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd\",\n \"instanceID\": \"10.1.223.130:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 1;\",\n \"start\": \"2019-07-09T16:26:01.427909078Z\",\n \"end\": \"2019-07-09T16:26:01.436951184Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d24bfe4b49ea55cb2fcddcd\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-09T16:26:01.437057273Z\",\n \"end\": \"2019-07-09T16:26:02.437057273Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d22fbd488c99c74dd667708\",\n \"sid\": 821,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-08T08:16:20.929099775Z\",\n \"completedOn\": \"2019-07-08T08:16:50.633350778Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d22fbd488c99c74dd667708\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-07-08T08:16:20.937366393Z\",\n \"end\": \"2019-07-08T08:16:21.51393328Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d22fbd488c99c74dd667708\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-08T08:16:21.513950071Z\",\n \"end\": \"2019-07-08T08:16:48.541006357Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d22fbd488c99c74dd667708:i-05d4a3184d081f353\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-08T08:16:50Z\",\n \"end\": \"2019-07-08T08:16:49Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d22fbd488c99c74dd667708\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-08T08:16:50.555041974Z\",\n \"end\": \"2019-07-08T08:16:50.625279046Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d22fbd488c99c74dd667708\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-08T08:16:50.62537664Z\",\n \"end\": \"2019-07-08T08:16:51.62537664Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d229303b49ea50ef081e94b\",\n \"sid\": 820,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-08T00:49:07.078975985Z\",\n \"completedOn\": \"2019-07-08T00:49:07.240075831Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d229303b49ea50ef081e94b\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-07-08T00:49:07.087244028Z\",\n \"end\": \"2019-07-08T00:49:07.099401056Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d229303b49ea50ef081e94b\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-07-08T00:49:07.087271689Z\",\n \"end\": \"2019-07-08T00:49:07.235057647Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d229303b49ea50ef081e94b\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-08T00:49:07.235158971Z\",\n \"end\": \"2019-07-08T00:49:08.235158971Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2292ddb49ea50ef081e94a\",\n \"sid\": 819,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-08T00:48:29.90352382Z\",\n \"completedOn\": \"2019-07-08T00:48:59.582144641Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-07-08T00:48:29.91393739Z\",\n \"end\": \"2019-07-08T00:48:30.367439311Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-07-08T00:48:30.36746677Z\",\n \"end\": \"2019-07-08T00:48:57.387672089Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-07-08T00:48:30.367461698Z\",\n \"end\": \"2019-07-08T00:48:57.388966103Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-07-08T00:48:30.367449779Z\",\n \"end\": \"2019-07-08T00:48:57.390633247Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a:i-00dd8b0f4fb2351aa\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-08T00:48:59Z\",\n \"end\": \"2019-07-08T00:48:58Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a:i-00b7d1f671a9f301f\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-08T00:48:59Z\",\n \"end\": \"2019-07-08T00:48:58Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a:i-0923b40e7bd08b95b\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-08T00:48:59Z\",\n \"end\": \"2019-07-08T00:48:58Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-07-08T00:48:59.403913674Z\",\n \"end\": \"2019-07-08T00:48:59.424362226Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-07-08T00:48:59.405313834Z\",\n \"end\": \"2019-07-08T00:48:59.424764017Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-07-08T00:48:59.400930997Z\",\n \"end\": \"2019-07-08T00:48:59.570236086Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292ddb49ea50ef081e94a\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-08T00:48:59.570340733Z\",\n \"end\": \"2019-07-08T00:49:00.570340733Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2292c2b49ea50ef081e949\",\n \"sid\": 818,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-08T00:48:02.339577888Z\",\n \"completedOn\": \"2019-07-08T00:48:02.429758688Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2292c2b49ea50ef081e949\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-08T00:48:02.346833459Z\",\n \"end\": \"2019-07-08T00:48:02.425047758Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2292c2b49ea50ef081e949\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-08T00:48:02.425144233Z\",\n \"end\": \"2019-07-08T00:48:03.425144233Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d22929bb49ea50ef081e948\",\n \"sid\": 817,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-08T00:47:23.680048687Z\",\n \"completedOn\": \"2019-07-08T00:47:53.335536686Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d22929bb49ea50ef081e948\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-07-08T00:47:23.686679703Z\",\n \"end\": \"2019-07-08T00:47:24.197593891Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d22929bb49ea50ef081e948\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-08T00:47:24.197603928Z\",\n \"end\": \"2019-07-08T00:47:51.216899168Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d22929bb49ea50ef081e948:i-05d4a3184d081f353\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-08T00:47:53Z\",\n \"end\": \"2019-07-08T00:47:52Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d22929bb49ea50ef081e948\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-08T00:47:53.228899889Z\",\n \"end\": \"2019-07-08T00:47:53.328785827Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d22929bb49ea50ef081e948\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-08T00:47:53.328891326Z\",\n \"end\": \"2019-07-08T00:47:54.328891326Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d21ed9db49ea50ef081e93c\",\n \"sid\": 816,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-07T13:03:25.663472028Z\",\n \"completedOn\": \"2019-07-07T13:03:25.71203882Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d21ed9db49ea50ef081e93c\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-07T13:03:25.670299506Z\",\n \"end\": \"2019-07-07T13:03:25.705917133Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d21ed9db49ea50ef081e93c\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-07T13:03:25.706004197Z\",\n \"end\": \"2019-07-07T13:03:26.706004197Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d21eb13b49ea50ef081e93b\",\n \"sid\": 815,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-07T12:52:35.51387475Z\",\n \"completedOn\": \"2019-07-07T12:52:35.561029716Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d21eb13b49ea50ef081e93b\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-07T12:52:35.520067964Z\",\n \"end\": \"2019-07-07T12:52:35.556685136Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d21eb13b49ea50ef081e93b\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-07T12:52:35.556789463Z\",\n \"end\": \"2019-07-07T12:52:36.556789463Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d21e8bbb49ea50ef081e93a\",\n \"sid\": 814,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-07T12:42:35.512726908Z\",\n \"completedOn\": \"2019-07-07T12:42:35.56349987Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d21e8bbb49ea50ef081e93a\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-07T12:42:35.520564207Z\",\n \"end\": \"2019-07-07T12:42:35.557558831Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d21e8bbb49ea50ef081e93a\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-07T12:42:35.557643432Z\",\n \"end\": \"2019-07-07T12:42:36.557643432Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d21e663b49ea50ef081e939\",\n \"sid\": 813,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-07T12:32:35.49639993Z\",\n \"completedOn\": \"2019-07-07T12:32:35.553783457Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d21e663b49ea50ef081e939\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-07T12:32:35.503395563Z\",\n \"end\": \"2019-07-07T12:32:35.548397371Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d21e663b49ea50ef081e939\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-07T12:32:35.548504082Z\",\n \"end\": \"2019-07-07T12:32:36.548504082Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d21e40bb49ea50ef081e938\",\n \"sid\": 812,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-07T12:22:35.559657416Z\",\n \"completedOn\": \"2019-07-07T12:23:05.133586008Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d21e40bb49ea50ef081e938\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-07-07T12:22:35.564991429Z\",\n \"end\": \"2019-07-07T12:22:36.031659124Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d21e40bb49ea50ef081e938\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-07T12:22:36.031667698Z\",\n \"end\": \"2019-07-07T12:23:03.047286951Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d21e40bb49ea50ef081e938:i-05d4a3184d081f353\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-07-07T12:23:05Z\",\n \"end\": \"2019-07-07T12:23:04Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d21e40bb49ea50ef081e938\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Search\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-07T12:23:05.057472418Z\",\n \"end\": \"2019-07-07T12:23:05.127104152Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d21e40bb49ea50ef081e938\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-07T12:23:05.127199271Z\",\n \"end\": \"2019-07-07T12:23:06.127199271Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d2180ccb49ea50ef081e932\",\n \"sid\": 811,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-07T05:19:08.980920152Z\",\n \"completedOn\": \"2019-07-07T05:20:05.993912862Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d2180ccb49ea50ef081e932\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-07T05:19:08.985984182Z\",\n \"end\": \"2019-07-07T05:19:09.962485766Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2180ccb49ea50ef081e932\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 10112122;\",\n \"start\": \"2019-07-07T05:19:09.962495651Z\",\n \"end\": \"2019-07-07T05:20:00.980875217Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2180ccb49ea50ef081e932:i-05d4a3184d081f353\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 135.4 MBS size: 145MB, duration: 1.1 seconds \",\n \"start\": \"2019-07-07T05:20:02Z\",\n \"end\": \"2019-07-07T05:20:02Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d2180ccb49ea50ef081e932:i-05d4a3184d081f353\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 372.8 MBS size: 534MB, duration: 1.4 seconds \",\n \"start\": \"2019-07-07T05:20:03Z\",\n \"end\": \"2019-07-07T05:20:03Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d2180ccb49ea50ef081e932:i-05d4a3184d081f353\",\n \"instanceID\": \"10.1.80.102:20190630;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-07T05:20:03Z\",\n \"end\": \"2019-07-07T05:20:04Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d2180ccb49ea50ef081e932\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-07-07T05:20:05.988626122Z\",\n \"end\": \"2019-07-07T05:20:06.988626122Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d217ebab49ea50ef081e930\",\n \"sid\": 810,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-07T05:10:18.975658565Z\",\n \"completedOn\": \"2019-07-07T05:18:38.983049717Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d217ebab49ea50ef081e930\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-07T05:10:18.980734485Z\",\n \"end\": \"2019-07-07T05:10:20.1529442Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d217ebab49ea50ef081e930\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Timeout\",\n \"message\": \"Timeout\",\n \"start\": \"2019-07-07T05:18:38.980923836Z\",\n \"end\": \"2019-07-07T05:18:39.980923836Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"cancelled\"\n },\n {\n \"id\": \"5d1d69e4b49ea50ef081e8f6\",\n \"sid\": 809,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-04T02:52:20.080036584Z\",\n \"completedOn\": \"2019-07-04T02:53:10.28572149Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1d69e4b49ea50ef081e8f6\",\n \"instanceID\": \"10.1.232.52:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 5;\",\n \"start\": \"2019-07-04T02:53:10.189667561Z\",\n \"end\": \"2019-07-04T02:53:10.199101312Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1d69e4b49ea50ef081e8f6\",\n \"instanceID\": \"10.1.141.136:20190512;\",\n \"name\": \"Search\",\n \"message\": \"Event count 17218374;\",\n \"start\": \"2019-07-04T02:53:10.187592884Z\",\n \"end\": \"2019-07-04T02:53:10.273213842Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1d69e4b49ea50ef081e8f6\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-04T02:53:10.2733031Z\",\n \"end\": \"2019-07-04T02:53:11.2733031Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1d69dab49ea50ef081e8f3\",\n \"sid\": 808,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-04T02:52:10.832513007Z\",\n \"completedOn\": \"2019-07-04T02:53:10.189547939Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-04T02:52:10.837219099Z\",\n \"end\": \"2019-07-04T02:52:11.912179979Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3\",\n \"instanceID\": \"10.1.232.52:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 5;\",\n \"start\": \"2019-07-04T02:52:11.912191989Z\",\n \"end\": \"2019-07-04T02:53:02.93253843Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3\",\n \"instanceID\": \"10.1.141.136:20190512;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 17218374;\",\n \"start\": \"2019-07-04T02:52:11.912205773Z\",\n \"end\": \"2019-07-04T02:53:02.933492076Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3:i-01a679d52d99f92c9\",\n \"instanceID\": \"10.1.232.52:overflow;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 0.0 MBS size: 0MB, duration: 0.1 seconds \",\n \"start\": \"2019-07-04T02:53:04Z\",\n \"end\": \"2019-07-04T02:53:03Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3:i-01a679d52d99f92c9\",\n \"instanceID\": \"10.1.232.52:overflow;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 0.0 MBS size: 0MB, duration: 0.1 seconds \",\n \"start\": \"2019-07-04T02:53:04Z\",\n \"end\": \"2019-07-04T02:53:03Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3:i-01a679d52d99f92c9\",\n \"instanceID\": \"10.1.232.52:overflow;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-04T02:53:04Z\",\n \"end\": \"2019-07-04T02:53:03Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3\",\n \"instanceID\": \"10.1.232.52:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 5;\",\n \"start\": \"2019-07-04T02:53:04.344228314Z\",\n \"end\": \"2019-07-04T02:53:04.354231416Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3:i-06ad5101c9c6f717f\",\n \"instanceID\": \"10.1.141.136:20190512;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 133.7 MBS size: 283MB, duration: 2.1 seconds \",\n \"start\": \"2019-07-04T02:53:04Z\",\n \"end\": \"2019-07-04T02:53:05Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3:i-06ad5101c9c6f717f\",\n \"instanceID\": \"10.1.141.136:20190512;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 414.8 MBS size: 900MB, duration: 2.2 seconds \",\n \"start\": \"2019-07-04T02:53:06Z\",\n \"end\": \"2019-07-04T02:53:07Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3:i-06ad5101c9c6f717f\",\n \"instanceID\": \"10.1.141.136:20190512;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-04T02:53:08Z\",\n \"end\": \"2019-07-04T02:53:09Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3\",\n \"instanceID\": \"10.1.141.136:20190512;\",\n \"name\": \"Search\",\n \"message\": \"Event count 17218374;\",\n \"start\": \"2019-07-04T02:53:10.107193402Z\",\n \"end\": \"2019-07-04T02:53:10.181671689Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1d69dab49ea50ef081e8f3\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-04T02:53:10.181771086Z\",\n \"end\": \"2019-07-04T02:53:11.181771086Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1cd887b49ea50ef081e8f0\",\n \"sid\": 807,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-03T16:32:07.679057577Z\",\n \"completedOn\": \"2019-07-03T16:35:31.254588995Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1cd887b49ea50ef081e8f0\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-03T16:35:31.250022545Z\",\n \"end\": \"2019-07-03T16:35:32.250022545Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"cancelled\"\n },\n {\n \"id\": \"5d1cd75fb49ea50ef081e8ee\",\n \"sid\": 806,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-03T16:27:11.243561773Z\",\n \"completedOn\": \"2019-07-03T16:35:31.2498988Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1cd75fb49ea50ef081e8ee\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-03T16:27:11.247471136Z\",\n \"end\": \"2019-07-03T16:27:12.431824705Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1cd75fb49ea50ef081e8ee\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Timeout\",\n \"message\": \"Timeout\",\n \"start\": \"2019-07-03T16:35:31.247638207Z\",\n \"end\": \"2019-07-03T16:35:32.247638207Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"cancelled\"\n },\n {\n \"id\": \"5d1b7824b49ea50ef081e8e2\",\n \"sid\": 805,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-07-02T15:28:36.647582213Z\",\n \"completedOn\": \"2019-07-02T15:29:36.568699485Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1b7824b49ea50ef081e8e2\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-07-02T15:28:36.652723626Z\",\n \"end\": \"2019-07-02T15:28:38.242516138Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1b7824b49ea50ef081e8e2\",\n \"instanceID\": \"10.1.101.129:20190512;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 17218374;\",\n \"start\": \"2019-07-02T15:28:38.242528328Z\",\n \"end\": \"2019-07-02T15:29:29.261782007Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1b7824b49ea50ef081e8e2:i-0320cd2625c4e0d9e\",\n \"instanceID\": \"10.1.101.129:20190512;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 131.9 MBS size: 283MB, duration: 2.1 seconds \",\n \"start\": \"2019-07-02T15:29:30Z\",\n \"end\": \"2019-07-02T15:29:31Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d1b7824b49ea50ef081e8e2:i-0320cd2625c4e0d9e\",\n \"instanceID\": \"10.1.101.129:20190512;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 404.6 MBS size: 900MB, duration: 2.2 seconds \",\n \"start\": \"2019-07-02T15:29:32Z\",\n \"end\": \"2019-07-02T15:29:33Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d1b7824b49ea50ef081e8e2:i-0320cd2625c4e0d9e\",\n \"instanceID\": \"10.1.101.129:20190512;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-07-02T15:29:34Z\",\n \"end\": \"2019-07-02T15:29:35Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1b7824b49ea50ef081e8e2\",\n \"instanceID\": \"10.1.101.129:20190512;\",\n \"name\": \"Search\",\n \"message\": \"Event count 17218374;\",\n \"start\": \"2019-07-02T15:29:36.483323997Z\",\n \"end\": \"2019-07-02T15:29:36.563185832Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1b7824b49ea50ef081e8e2\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-07-02T15:29:36.563286284Z\",\n \"end\": \"2019-07-02T15:29:37.563286284Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18b3ae88c99c39c7e036ba\",\n \"sid\": 804,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T13:05:50.350404577Z\",\n \"completedOn\": \"2019-06-30T13:05:50.368873087Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18b3ae88c99c39c7e036ba\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T13:05:50.356936467Z\",\n \"end\": \"2019-06-30T13:05:50.366828356Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18b3ae88c99c39c7e036ba\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T13:05:50.366919937Z\",\n \"end\": \"2019-06-30T13:05:51.366919937Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18b15688c99c39c7e036b9\",\n \"sid\": 803,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T12:55:50.32725496Z\",\n \"completedOn\": \"2019-06-30T12:55:50.345774801Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18b15688c99c39c7e036b9\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T12:55:50.33398329Z\",\n \"end\": \"2019-06-30T12:55:50.343113578Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18b15688c99c39c7e036b9\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T12:55:50.34319216Z\",\n \"end\": \"2019-06-30T12:55:51.34319216Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18aefe88c99c39c7e036b8\",\n \"sid\": 802,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T12:45:50.295948484Z\",\n \"completedOn\": \"2019-06-30T12:45:50.314572424Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18aefe88c99c39c7e036b8\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T12:45:50.302785001Z\",\n \"end\": \"2019-06-30T12:45:50.312584605Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18aefe88c99c39c7e036b8\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T12:45:50.312663365Z\",\n \"end\": \"2019-06-30T12:45:51.312663365Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18aca688c99c39c7e036b7\",\n \"sid\": 801,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T12:35:50.313573049Z\",\n \"completedOn\": \"2019-06-30T12:35:50.35496214Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18aca688c99c39c7e036b7\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T12:35:50.320320091Z\",\n \"end\": \"2019-06-30T12:35:50.352314532Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18aca688c99c39c7e036b7\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T12:35:50.352396611Z\",\n \"end\": \"2019-06-30T12:35:51.352396611Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18a2b088c99c39c7e036b6\",\n \"sid\": 800,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T11:53:20.498316698Z\",\n \"completedOn\": \"2019-06-30T11:53:20.546238537Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18a2b088c99c39c7e036b6\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T11:53:20.508123844Z\",\n \"end\": \"2019-06-30T11:53:20.540946571Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18a2b088c99c39c7e036b6\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T11:53:20.541055642Z\",\n \"end\": \"2019-06-30T11:53:21.541055642Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18a14b88c99c39c7e036b3\",\n \"sid\": 799,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T11:47:23.723213952Z\",\n \"completedOn\": \"2019-06-30T11:47:23.781304882Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18a14b88c99c39c7e036b3\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T11:47:23.730191136Z\",\n \"end\": \"2019-06-30T11:47:23.7778495Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18a14b88c99c39c7e036b3\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T11:47:23.777919979Z\",\n \"end\": \"2019-06-30T11:47:24.777919979Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18a05888c99c39c7e036b2\",\n \"sid\": 798,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T11:43:20.481708916Z\",\n \"completedOn\": \"2019-06-30T11:43:20.523228738Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18a05888c99c39c7e036b2\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T11:43:20.488296Z\",\n \"end\": \"2019-06-30T11:43:20.520974299Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18a05888c99c39c7e036b2\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T11:43:20.521067429Z\",\n \"end\": \"2019-06-30T11:43:21.521067429Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d189de388c99c39c7e036b1\",\n \"sid\": 797,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T11:32:51.148479177Z\",\n \"completedOn\": \"2019-06-30T11:32:51.193198195Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d189de388c99c39c7e036b1\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T11:32:51.155165241Z\",\n \"end\": \"2019-06-30T11:32:51.188558135Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d189de388c99c39c7e036b1\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T11:32:51.188653235Z\",\n \"end\": \"2019-06-30T11:32:52.188653235Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d189b4a88c99c39c7e036b0\",\n \"sid\": 796,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T11:21:46.136311233Z\",\n \"completedOn\": \"2019-06-30T11:21:46.179970189Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d189b4a88c99c39c7e036b0\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T11:21:46.143163908Z\",\n \"end\": \"2019-06-30T11:21:46.176215611Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d189b4a88c99c39c7e036b0\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T11:21:46.176326568Z\",\n \"end\": \"2019-06-30T11:21:47.176326568Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18922788c99c39c7e036af\",\n \"sid\": 795,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T10:42:47.700104371Z\",\n \"completedOn\": \"2019-06-30T10:42:47.747216326Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18922788c99c39c7e036af\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T10:42:47.70878878Z\",\n \"end\": \"2019-06-30T10:42:47.742536976Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18922788c99c39c7e036af\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T10:42:47.742644226Z\",\n \"end\": \"2019-06-30T10:42:48.742644226Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d188f9088c99c39c7e036ae\",\n \"sid\": 794,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T10:31:44.174888317Z\",\n \"completedOn\": \"2019-06-30T10:31:44.220101414Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d188f9088c99c39c7e036ae\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T10:31:44.181836992Z\",\n \"end\": \"2019-06-30T10:31:44.215099664Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d188f9088c99c39c7e036ae\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T10:31:44.21518046Z\",\n \"end\": \"2019-06-30T10:31:45.21518046Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d188cf888c99c39c7e036ab\",\n \"sid\": 793,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T10:20:40.223805382Z\",\n \"completedOn\": \"2019-06-30T10:20:40.268804368Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d188cf888c99c39c7e036ab\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T10:20:40.230164884Z\",\n \"end\": \"2019-06-30T10:20:40.264905322Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d188cf888c99c39c7e036ab\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T10:20:40.26498596Z\",\n \"end\": \"2019-06-30T10:20:41.26498596Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d188a5c88c99c39c7e036aa\",\n \"sid\": 792,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T10:09:32.619995892Z\",\n \"completedOn\": \"2019-06-30T10:09:32.666307286Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d188a5c88c99c39c7e036aa\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T10:09:32.626614367Z\",\n \"end\": \"2019-06-30T10:09:32.660504118Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d188a5c88c99c39c7e036aa\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T10:09:32.660593301Z\",\n \"end\": \"2019-06-30T10:09:33.660593301Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1887c188c99c39c7e036a9\",\n \"sid\": 791,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T09:58:25.523644871Z\",\n \"completedOn\": \"2019-06-30T09:58:25.569502357Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1887c188c99c39c7e036a9\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T09:58:25.531023772Z\",\n \"end\": \"2019-06-30T09:58:25.564593548Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1887c188c99c39c7e036a9\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T09:58:25.564670542Z\",\n \"end\": \"2019-06-30T09:58:26.564670542Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18852788c99c39c7e036a8\",\n \"sid\": 790,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T09:47:19.254737956Z\",\n \"completedOn\": \"2019-06-30T09:47:19.298762777Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18852788c99c39c7e036a8\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T09:47:19.261479418Z\",\n \"end\": \"2019-06-30T09:47:19.295066217Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18852788c99c39c7e036a8\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T09:47:19.295145788Z\",\n \"end\": \"2019-06-30T09:47:20.295145788Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18828c88c99c39c7e036a7\",\n \"sid\": 789,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T09:36:12.588464271Z\",\n \"completedOn\": \"2019-06-30T09:36:12.633827953Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18828c88c99c39c7e036a7\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T09:36:12.596226859Z\",\n \"end\": \"2019-06-30T09:36:12.630109843Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18828c88c99c39c7e036a7\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T09:36:12.630198704Z\",\n \"end\": \"2019-06-30T09:36:13.630198704Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d187ff188c99c39c7e036a6\",\n \"sid\": 788,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T09:25:05.820109784Z\",\n \"completedOn\": \"2019-06-30T09:25:05.864568285Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d187ff188c99c39c7e036a6\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T09:25:05.827027985Z\",\n \"end\": \"2019-06-30T09:25:05.860934184Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d187ff188c99c39c7e036a6\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T09:25:05.86101856Z\",\n \"end\": \"2019-06-30T09:25:06.86101856Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d187d5988c99c39c7e036a5\",\n \"sid\": 787,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T09:14:01.518711629Z\",\n \"completedOn\": \"2019-06-30T09:14:01.564313981Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d187d5988c99c39c7e036a5\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T09:14:01.525019396Z\",\n \"end\": \"2019-06-30T09:14:01.560314106Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d187d5988c99c39c7e036a5\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T09:14:01.560408683Z\",\n \"end\": \"2019-06-30T09:14:02.560408683Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d187abf88c99c39c7e036a4\",\n \"sid\": 786,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T09:02:55.889503672Z\",\n \"completedOn\": \"2019-06-30T09:02:55.934562101Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d187abf88c99c39c7e036a4\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T09:02:55.896351418Z\",\n \"end\": \"2019-06-30T09:02:55.930255907Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d187abf88c99c39c7e036a4\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T09:02:55.93034638Z\",\n \"end\": \"2019-06-30T09:02:56.93034638Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18782788c99c39c7e036a3\",\n \"sid\": 785,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T08:51:51.686523564Z\",\n \"completedOn\": \"2019-06-30T08:51:51.73180567Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18782788c99c39c7e036a3\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T08:51:51.693288738Z\",\n \"end\": \"2019-06-30T08:51:51.728405547Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18782788c99c39c7e036a3\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T08:51:51.728488845Z\",\n \"end\": \"2019-06-30T08:51:52.728488845Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18758c88c99c39c7e036a2\",\n \"sid\": 784,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T08:40:44.486296992Z\",\n \"completedOn\": \"2019-06-30T08:40:44.532991381Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18758c88c99c39c7e036a2\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T08:40:44.493106891Z\",\n \"end\": \"2019-06-30T08:40:44.527884597Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18758c88c99c39c7e036a2\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T08:40:44.527969502Z\",\n \"end\": \"2019-06-30T08:40:45.527969502Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1872f388c99c39c7e036a1\",\n \"sid\": 783,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T08:29:39.05461607Z\",\n \"completedOn\": \"2019-06-30T08:29:39.100105655Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1872f388c99c39c7e036a1\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T08:29:39.061713417Z\",\n \"end\": \"2019-06-30T08:29:39.095924986Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1872f388c99c39c7e036a1\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T08:29:39.096017496Z\",\n \"end\": \"2019-06-30T08:29:40.096017496Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18707388c99c39c7e036a0\",\n \"sid\": 782,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T08:18:59.779956807Z\",\n \"completedOn\": \"2019-06-30T08:18:59.82675968Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18707388c99c39c7e036a0\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T08:18:59.786753108Z\",\n \"end\": \"2019-06-30T08:18:59.821805168Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18707388c99c39c7e036a0\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T08:18:59.82190128Z\",\n \"end\": \"2019-06-30T08:19:00.82190128Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18678488c99c39c7e0369f\",\n \"sid\": 781,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T07:40:52.522081121Z\",\n \"completedOn\": \"2019-06-30T07:40:52.566182885Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18678488c99c39c7e0369f\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T07:40:52.529386793Z\",\n \"end\": \"2019-06-30T07:40:52.563534138Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18678488c99c39c7e0369f\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T07:40:52.563636295Z\",\n \"end\": \"2019-06-30T07:40:53.563636295Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18652c88c99c39c7e0369e\",\n \"sid\": 780,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T07:30:52.501436575Z\",\n \"completedOn\": \"2019-06-30T07:30:52.546985018Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18652c88c99c39c7e0369e\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T07:30:52.508160626Z\",\n \"end\": \"2019-06-30T07:30:52.543000105Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18652c88c99c39c7e0369e\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T07:30:52.543101681Z\",\n \"end\": \"2019-06-30T07:30:53.543101681Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1862d488c99c39c7e0369d\",\n \"sid\": 779,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T07:20:52.502080577Z\",\n \"completedOn\": \"2019-06-30T07:20:52.558077032Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1862d488c99c39c7e0369d\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T07:20:52.510296703Z\",\n \"end\": \"2019-06-30T07:20:52.552782895Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1862d488c99c39c7e0369d\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T07:20:52.552854862Z\",\n \"end\": \"2019-06-30T07:20:53.552854862Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18607c88c99c39c7e0369c\",\n \"sid\": 778,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T07:10:52.494306827Z\",\n \"completedOn\": \"2019-06-30T07:10:52.541861322Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18607c88c99c39c7e0369c\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T07:10:52.502110101Z\",\n \"end\": \"2019-06-30T07:10:52.536632974Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18607c88c99c39c7e0369c\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T07:10:52.536723692Z\",\n \"end\": \"2019-06-30T07:10:53.536723692Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d185e2488c99c39c7e0369b\",\n \"sid\": 777,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T07:00:52.480758647Z\",\n \"completedOn\": \"2019-06-30T07:00:52.52632502Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d185e2488c99c39c7e0369b\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T07:00:52.487251685Z\",\n \"end\": \"2019-06-30T07:00:52.522460515Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d185e2488c99c39c7e0369b\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T07:00:52.522533287Z\",\n \"end\": \"2019-06-30T07:00:53.522533287Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d185bcc88c99c39c7e0369a\",\n \"sid\": 776,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T06:50:52.483235422Z\",\n \"completedOn\": \"2019-06-30T06:50:52.529797396Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d185bcc88c99c39c7e0369a\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T06:50:52.490567907Z\",\n \"end\": \"2019-06-30T06:50:52.525575876Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d185bcc88c99c39c7e0369a\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T06:50:52.52565859Z\",\n \"end\": \"2019-06-30T06:50:53.52565859Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18595f88c99c39c7e03699\",\n \"sid\": 775,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T06:40:31.884792981Z\",\n \"completedOn\": \"2019-06-30T06:40:31.931442959Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18595f88c99c39c7e03699\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T06:40:31.891345623Z\",\n \"end\": \"2019-06-30T06:40:31.926623719Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18595f88c99c39c7e03699\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T06:40:31.926707785Z\",\n \"end\": \"2019-06-30T06:40:32.926707785Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1856c288c99c39c7e03698\",\n \"sid\": 774,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T06:29:22.416719117Z\",\n \"completedOn\": \"2019-06-30T06:29:22.464304904Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1856c288c99c39c7e03698\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T06:29:22.423608056Z\",\n \"end\": \"2019-06-30T06:29:22.459198179Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1856c288c99c39c7e03698\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T06:29:22.459279759Z\",\n \"end\": \"2019-06-30T06:29:23.459279759Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18542888c99c39c7e03697\",\n \"sid\": 773,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T06:18:16.347894441Z\",\n \"completedOn\": \"2019-06-30T06:18:16.395933586Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18542888c99c39c7e03697\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T06:18:16.355504814Z\",\n \"end\": \"2019-06-30T06:18:16.390333054Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18542888c99c39c7e03697\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T06:18:16.390427745Z\",\n \"end\": \"2019-06-30T06:18:17.390427745Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18519088c99c39c7e03696\",\n \"sid\": 772,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T06:07:12.114528659Z\",\n \"completedOn\": \"2019-06-30T06:07:12.161072081Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18519088c99c39c7e03696\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T06:07:12.121274563Z\",\n \"end\": \"2019-06-30T06:07:12.156821898Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18519088c99c39c7e03696\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T06:07:12.156905846Z\",\n \"end\": \"2019-06-30T06:07:13.156905846Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d184ef488c99c39c7e03695\",\n \"sid\": 771,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T05:56:04.423625237Z\",\n \"completedOn\": \"2019-06-30T05:56:04.471785201Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d184ef488c99c39c7e03695\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T05:56:04.432108259Z\",\n \"end\": \"2019-06-30T05:56:04.467665616Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d184ef488c99c39c7e03695\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T05:56:04.467751608Z\",\n \"end\": \"2019-06-30T05:56:05.467751608Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d184c5b88c99c39c7e03694\",\n \"sid\": 770,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T05:44:59.081692218Z\",\n \"completedOn\": \"2019-06-30T05:44:59.12814189Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d184c5b88c99c39c7e03694\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T05:44:59.088392848Z\",\n \"end\": \"2019-06-30T05:44:59.124352901Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d184c5b88c99c39c7e03694\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T05:44:59.124441607Z\",\n \"end\": \"2019-06-30T05:45:00.124441607Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1849c088c99c39c7e03693\",\n \"sid\": 769,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T05:33:52.839200227Z\",\n \"completedOn\": \"2019-06-30T05:33:52.885397522Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1849c088c99c39c7e03693\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T05:33:52.846360124Z\",\n \"end\": \"2019-06-30T05:33:52.881861117Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1849c088c99c39c7e03693\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T05:33:52.881935831Z\",\n \"end\": \"2019-06-30T05:33:53.881935831Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18472788c99c39c7e03692\",\n \"sid\": 768,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T05:22:47.934731181Z\",\n \"completedOn\": \"2019-06-30T05:22:47.992170743Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18472788c99c39c7e03692\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T05:22:47.941007003Z\",\n \"end\": \"2019-06-30T05:22:47.987038792Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18472788c99c39c7e03692\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T05:22:47.987134173Z\",\n \"end\": \"2019-06-30T05:22:48.987134173Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18448f88c99c39c7e03691\",\n \"sid\": 767,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T05:11:43.112806985Z\",\n \"completedOn\": \"2019-06-30T05:11:43.162901996Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18448f88c99c39c7e03691\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Search\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T05:11:43.120464138Z\",\n \"end\": \"2019-06-30T05:11:43.158555882Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18448f88c99c39c7e03691\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-30T05:11:43.158642839Z\",\n \"end\": \"2019-06-30T05:11:44.158642839Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18447388c99c39c7e0368f\",\n \"sid\": 766,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T05:11:15.897079653Z\",\n \"completedOn\": \"2019-06-30T05:11:46.205638867Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18447388c99c39c7e0368f\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-06-30T05:11:15.904890942Z\",\n \"end\": \"2019-06-30T05:11:17.428573395Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18447388c99c39c7e0368f\",\n \"instanceID\": \"10.1.102.77:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 570500;\",\n \"start\": \"2019-06-30T05:11:17.428582091Z\",\n \"end\": \"2019-06-30T05:11:44.445090621Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18447388c99c39c7e0368f:i-0ccd2945ee2ab1ac4\",\n \"instanceID\": \"10.1.102.77:overflow;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 23.9 MBS size: 6MB, duration: 0.3 seconds \",\n \"start\": \"2019-06-30T05:11:45Z\",\n \"end\": \"2019-06-30T05:11:44Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d18447388c99c39c7e0368f:i-0ccd2945ee2ab1ac4\",\n \"instanceID\": \"10.1.102.77:overflow;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 175.7 MBS size: 27MB, duration: 0.2 seconds \",\n \"start\": \"2019-06-30T05:11:44Z\",\n \"end\": \"2019-06-30T05:11:44Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d18447388c99c39c7e0368f:i-0ccd2945ee2ab1ac4\",\n \"instanceID\": \"10.1.102.77:overflow;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-06-30T05:11:46Z\",\n \"end\": \"2019-06-30T05:11:45Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18447388c99c39c7e0368f\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-06-30T05:11:46.200013388Z\",\n \"end\": \"2019-06-30T05:11:47.200013388Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d18443b88c99c39c7e0368d\",\n \"sid\": 765,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-30T05:10:19.265000359Z\",\n \"completedOn\": \"2019-06-30T05:11:15.90725762Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d18443b88c99c39c7e0368d\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-06-30T05:10:19.27028948Z\",\n \"end\": \"2019-06-30T05:10:20.306735415Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18443b88c99c39c7e0368d\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 9164708;\",\n \"start\": \"2019-06-30T05:10:20.306744272Z\",\n \"end\": \"2019-06-30T05:11:11.328451216Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18443b88c99c39c7e0368d:i-0132176cf15f829a0\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 212.2 MBS size: 138MB, duration: 0.7 seconds \",\n \"start\": \"2019-06-30T05:11:11Z\",\n \"end\": \"2019-06-30T05:11:11Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d18443b88c99c39c7e0368d:i-0132176cf15f829a0\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 344.5 MBS size: 492MB, duration: 1.4 seconds \",\n \"start\": \"2019-06-30T05:11:13Z\",\n \"end\": \"2019-06-30T05:11:13Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d18443b88c99c39c7e0368d:i-0132176cf15f829a0\",\n \"instanceID\": \"10.1.98.44:20190623;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-06-30T05:11:13Z\",\n \"end\": \"2019-06-30T05:11:14Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d18443b88c99c39c7e0368d\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-06-30T05:11:15.8937336Z\",\n \"end\": \"2019-06-30T05:11:16.8937336Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d15018888c99c39c7e03607\",\n \"sid\": 764,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-27T17:48:56.315867927Z\",\n \"completedOn\": \"2019-06-27T17:48:56.345032127Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d15018888c99c39c7e03607\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-27T17:48:56.323283308Z\",\n \"end\": \"2019-06-27T17:48:56.34285263Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d15018888c99c39c7e03607\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-27T17:48:56.342940683Z\",\n \"end\": \"2019-06-27T17:48:57.342940683Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d15014e88c99c39c7e03606\",\n \"sid\": 763,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-27T17:47:58.704493179Z\",\n \"completedOn\": \"2019-06-27T17:48:28.56487261Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d15014e88c99c39c7e03606\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-06-27T17:47:58.711519649Z\",\n \"end\": \"2019-06-27T17:47:59.391924397Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d15014e88c99c39c7e03606\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-27T17:47:59.39193286Z\",\n \"end\": \"2019-06-27T17:48:26.40889772Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d15014e88c99c39c7e03606:i-05380f1c7a452e464\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-27T17:48:28Z\",\n \"end\": \"2019-06-27T17:48:27Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d15014e88c99c39c7e03606\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-27T17:48:28.419487004Z\",\n \"end\": \"2019-06-27T17:48:28.557791899Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d15014e88c99c39c7e03606\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-27T17:48:28.557905901Z\",\n \"end\": \"2019-06-27T17:48:29.557905901Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1366dd88c99c39c7e035d7\",\n \"sid\": 762,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:36:45.131405744Z\",\n \"completedOn\": \"2019-06-26T12:36:45.211898199Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1366dd88c99c39c7e035d7\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:36:45.137816471Z\",\n \"end\": \"2019-06-26T12:36:45.20924383Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366dd88c99c39c7e035d7\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:36:45.209344994Z\",\n \"end\": \"2019-06-26T12:36:46.209344994Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1366d388c99c39c7e035d6\",\n \"sid\": 761,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:36:35.723183095Z\",\n \"completedOn\": \"2019-06-26T12:36:35.76953828Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1366d388c99c39c7e035d6\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:36:35.730573441Z\",\n \"end\": \"2019-06-26T12:36:35.767225319Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366d388c99c39c7e035d6\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:36:35.767304169Z\",\n \"end\": \"2019-06-26T12:36:36.767304169Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1366ba88c99c39c7e035d5\",\n \"sid\": 760,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:36:10.115390702Z\",\n \"completedOn\": \"2019-06-26T12:36:10.658838433Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1366ba88c99c39c7e035d5\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:36:10.134153364Z\",\n \"end\": \"2019-06-26T12:36:10.14975588Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ba88c99c39c7e035d5\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:36:10.134549277Z\",\n \"end\": \"2019-06-26T12:36:10.149813465Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ba88c99c39c7e035d5\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:36:10.134625442Z\",\n \"end\": \"2019-06-26T12:36:10.149939699Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ba88c99c39c7e035d5\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:36:10.134473938Z\",\n \"end\": \"2019-06-26T12:36:10.318617182Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ba88c99c39c7e035d5\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:36:10.134698485Z\",\n \"end\": \"2019-06-26T12:36:10.459299047Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ba88c99c39c7e035d5\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:36:10.134306691Z\",\n \"end\": \"2019-06-26T12:36:10.610895312Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ba88c99c39c7e035d5\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:36:10.134396903Z\",\n \"end\": \"2019-06-26T12:36:10.655033285Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ba88c99c39c7e035d5\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:36:10.655153958Z\",\n \"end\": \"2019-06-26T12:36:11.655153958Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1366b688c99c39c7e035d4\",\n \"sid\": 759,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:36:06.007628425Z\",\n \"completedOn\": \"2019-06-26T12:36:06.488192675Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1366b688c99c39c7e035d4\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:36:06.028541132Z\",\n \"end\": \"2019-06-26T12:36:06.042146924Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b688c99c39c7e035d4\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:36:06.028318629Z\",\n \"end\": \"2019-06-26T12:36:06.044151089Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b688c99c39c7e035d4\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:36:06.028395563Z\",\n \"end\": \"2019-06-26T12:36:06.045510368Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b688c99c39c7e035d4\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:36:06.028183866Z\",\n \"end\": \"2019-06-26T12:36:06.169509192Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b688c99c39c7e035d4\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:36:06.0284685Z\",\n \"end\": \"2019-06-26T12:36:06.356355276Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b688c99c39c7e035d4\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:36:06.028607205Z\",\n \"end\": \"2019-06-26T12:36:06.452660124Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b688c99c39c7e035d4\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:36:06.028673827Z\",\n \"end\": \"2019-06-26T12:36:06.484017477Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b688c99c39c7e035d4\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:36:06.484133949Z\",\n \"end\": \"2019-06-26T12:36:07.484133949Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1366b288c99c39c7e035d3\",\n \"sid\": 758,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:36:02.037027083Z\",\n \"completedOn\": \"2019-06-26T12:36:02.510807448Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1366b288c99c39c7e035d3\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:36:02.056772051Z\",\n \"end\": \"2019-06-26T12:36:02.070057646Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b288c99c39c7e035d3\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:36:02.056266235Z\",\n \"end\": \"2019-06-26T12:36:02.071764446Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b288c99c39c7e035d3\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:36:02.056504964Z\",\n \"end\": \"2019-06-26T12:36:02.072512182Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b288c99c39c7e035d3\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:36:02.056707711Z\",\n \"end\": \"2019-06-26T12:36:02.198304811Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b288c99c39c7e035d3\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:36:02.056428295Z\",\n \"end\": \"2019-06-26T12:36:02.34355385Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b288c99c39c7e035d3\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:36:02.05657401Z\",\n \"end\": \"2019-06-26T12:36:02.477411099Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b288c99c39c7e035d3\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:36:02.056642317Z\",\n \"end\": \"2019-06-26T12:36:02.506540052Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366b288c99c39c7e035d3\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:36:02.506646112Z\",\n \"end\": \"2019-06-26T12:36:03.506646112Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1366ae88c99c39c7e035d2\",\n \"sid\": 757,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:35:58.162539456Z\",\n \"completedOn\": \"2019-06-26T12:35:58.631382043Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1366ae88c99c39c7e035d2\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:35:58.181678398Z\",\n \"end\": \"2019-06-26T12:35:58.195432996Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ae88c99c39c7e035d2\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:58.18164929Z\",\n \"end\": \"2019-06-26T12:35:58.195433035Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ae88c99c39c7e035d2\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:58.181376495Z\",\n \"end\": \"2019-06-26T12:35:58.197290909Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ae88c99c39c7e035d2\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:35:58.181656346Z\",\n \"end\": \"2019-06-26T12:35:58.317705751Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ae88c99c39c7e035d2\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:35:58.181546841Z\",\n \"end\": \"2019-06-26T12:35:58.494341036Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ae88c99c39c7e035d2\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:35:58.181426956Z\",\n \"end\": \"2019-06-26T12:35:58.600321835Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ae88c99c39c7e035d2\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:35:58.181558081Z\",\n \"end\": \"2019-06-26T12:35:58.627916191Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366ae88c99c39c7e035d2\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:35:58.628009662Z\",\n \"end\": \"2019-06-26T12:35:59.628009662Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1366a988c99c39c7e035d1\",\n \"sid\": 756,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:35:53.78045299Z\",\n \"completedOn\": \"2019-06-26T12:35:54.250694295Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1366a988c99c39c7e035d1\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:35:53.799939966Z\",\n \"end\": \"2019-06-26T12:35:53.813591026Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a988c99c39c7e035d1\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:53.79956618Z\",\n \"end\": \"2019-06-26T12:35:53.814688845Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a988c99c39c7e035d1\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:53.800012979Z\",\n \"end\": \"2019-06-26T12:35:53.815933288Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a988c99c39c7e035d1\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:35:53.799861785Z\",\n \"end\": \"2019-06-26T12:35:53.93391112Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a988c99c39c7e035d1\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:35:53.800096905Z\",\n \"end\": \"2019-06-26T12:35:54.121018814Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a988c99c39c7e035d1\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:35:53.799704913Z\",\n \"end\": \"2019-06-26T12:35:54.209645938Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a988c99c39c7e035d1\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:35:53.799788142Z\",\n \"end\": \"2019-06-26T12:35:54.244626803Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a988c99c39c7e035d1\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:35:54.244724674Z\",\n \"end\": \"2019-06-26T12:35:55.244724674Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1366a688c99c39c7e035d0\",\n \"sid\": 755,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:35:50.165524316Z\",\n \"completedOn\": \"2019-06-26T12:35:50.633182801Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1366a688c99c39c7e035d0\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:35:50.18405893Z\",\n \"end\": \"2019-06-26T12:35:50.197758099Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a688c99c39c7e035d0\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:50.184284717Z\",\n \"end\": \"2019-06-26T12:35:50.198847823Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a688c99c39c7e035d0\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:50.184137406Z\",\n \"end\": \"2019-06-26T12:35:50.200351108Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a688c99c39c7e035d0\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:35:50.183963391Z\",\n \"end\": \"2019-06-26T12:35:50.313794564Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a688c99c39c7e035d0\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:35:50.18420665Z\",\n \"end\": \"2019-06-26T12:35:50.495331125Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a688c99c39c7e035d0\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:35:50.184360392Z\",\n \"end\": \"2019-06-26T12:35:50.582621028Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a688c99c39c7e035d0\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:35:50.183823327Z\",\n \"end\": \"2019-06-26T12:35:50.623548714Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1366a688c99c39c7e035d0\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:35:50.623648193Z\",\n \"end\": \"2019-06-26T12:35:51.623648193Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d13669488c99c39c7e035cf\",\n \"sid\": 754,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:35:32.564329385Z\",\n \"completedOn\": \"2019-06-26T12:35:33.017639141Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d13669488c99c39c7e035cf\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:32.583940152Z\",\n \"end\": \"2019-06-26T12:35:32.597269214Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13669488c99c39c7e035cf\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:35:32.584343473Z\",\n \"end\": \"2019-06-26T12:35:32.598554035Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13669488c99c39c7e035cf\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:32.58442003Z\",\n \"end\": \"2019-06-26T12:35:32.598680667Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13669488c99c39c7e035cf\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:35:32.584267525Z\",\n \"end\": \"2019-06-26T12:35:32.708313467Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13669488c99c39c7e035cf\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:35:32.58451209Z\",\n \"end\": \"2019-06-26T12:35:32.888452423Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13669488c99c39c7e035cf\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:35:32.584106571Z\",\n \"end\": \"2019-06-26T12:35:32.981429239Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13669488c99c39c7e035cf\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:35:32.584192451Z\",\n \"end\": \"2019-06-26T12:35:33.0141237Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13669488c99c39c7e035cf\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:35:33.014220419Z\",\n \"end\": \"2019-06-26T12:35:34.014220419Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d13668f88c99c39c7e035ce\",\n \"sid\": 753,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:35:27.964453841Z\",\n \"completedOn\": \"2019-06-26T12:35:28.407331165Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d13668f88c99c39c7e035ce\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:35:27.983526614Z\",\n \"end\": \"2019-06-26T12:35:27.997148417Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668f88c99c39c7e035ce\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:27.98347327Z\",\n \"end\": \"2019-06-26T12:35:27.997875442Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668f88c99c39c7e035ce\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:27.98365113Z\",\n \"end\": \"2019-06-26T12:35:27.999511894Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668f88c99c39c7e035ce\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:35:27.983487245Z\",\n \"end\": \"2019-06-26T12:35:28.104465408Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668f88c99c39c7e035ce\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:35:27.983758929Z\",\n \"end\": \"2019-06-26T12:35:28.29525967Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668f88c99c39c7e035ce\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:35:27.983660773Z\",\n \"end\": \"2019-06-26T12:35:28.369393644Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668f88c99c39c7e035ce\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:35:27.98376617Z\",\n \"end\": \"2019-06-26T12:35:28.404160102Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668f88c99c39c7e035ce\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:35:28.404263295Z\",\n \"end\": \"2019-06-26T12:35:29.404263295Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d13668c88c99c39c7e035cd\",\n \"sid\": 752,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:35:24.625590382Z\",\n \"completedOn\": \"2019-06-26T12:35:25.063178282Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d13668c88c99c39c7e035cd\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:24.645909676Z\",\n \"end\": \"2019-06-26T12:35:24.658013673Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668c88c99c39c7e035cd\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:35:24.645662181Z\",\n \"end\": \"2019-06-26T12:35:24.659761987Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668c88c99c39c7e035cd\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:24.645748964Z\",\n \"end\": \"2019-06-26T12:35:24.660592275Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668c88c99c39c7e035cd\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:35:24.64550789Z\",\n \"end\": \"2019-06-26T12:35:24.760486685Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668c88c99c39c7e035cd\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:35:24.645830895Z\",\n \"end\": \"2019-06-26T12:35:24.947633918Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668c88c99c39c7e035cd\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:35:24.646010659Z\",\n \"end\": \"2019-06-26T12:35:25.023659536Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668c88c99c39c7e035cd\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:35:24.646094264Z\",\n \"end\": \"2019-06-26T12:35:25.055773086Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668c88c99c39c7e035cd\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:35:25.055868852Z\",\n \"end\": \"2019-06-26T12:35:26.055868852Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d13668988c99c39c7e035cc\",\n \"sid\": 751,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:35:21.636933726Z\",\n \"completedOn\": \"2019-06-26T12:35:22.066342552Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d13668988c99c39c7e035cc\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:35:21.65676643Z\",\n \"end\": \"2019-06-26T12:35:21.66883155Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668988c99c39c7e035cc\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:21.656459918Z\",\n \"end\": \"2019-06-26T12:35:21.670381225Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668988c99c39c7e035cc\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:21.656209035Z\",\n \"end\": \"2019-06-26T12:35:21.672509385Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668988c99c39c7e035cc\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:35:21.656693067Z\",\n \"end\": \"2019-06-26T12:35:21.768848848Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668988c99c39c7e035cc\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:35:21.656370553Z\",\n \"end\": \"2019-06-26T12:35:21.96002573Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668988c99c39c7e035cc\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:35:21.656537892Z\",\n \"end\": \"2019-06-26T12:35:22.029785094Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668988c99c39c7e035cc\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:35:21.656614995Z\",\n \"end\": \"2019-06-26T12:35:22.062416681Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668988c99c39c7e035cc\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:35:22.062509592Z\",\n \"end\": \"2019-06-26T12:35:23.062509592Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d13668488c99c39c7e035cb\",\n \"sid\": 750,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:35:16.422078636Z\",\n \"completedOn\": \"2019-06-26T12:35:16.842828917Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d13668488c99c39c7e035cb\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:16.440589963Z\",\n \"end\": \"2019-06-26T12:35:16.454372033Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668488c99c39c7e035cb\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:35:16.440642951Z\",\n \"end\": \"2019-06-26T12:35:16.456161623Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668488c99c39c7e035cb\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:16.440760545Z\",\n \"end\": \"2019-06-26T12:35:16.458263215Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668488c99c39c7e035cb\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:35:16.4406041Z\",\n \"end\": \"2019-06-26T12:35:16.548328111Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668488c99c39c7e035cb\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:35:16.440793282Z\",\n \"end\": \"2019-06-26T12:35:16.744562399Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668488c99c39c7e035cb\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:35:16.440770414Z\",\n \"end\": \"2019-06-26T12:35:16.809517944Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668488c99c39c7e035cb\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:35:16.440874197Z\",\n \"end\": \"2019-06-26T12:35:16.834320251Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13668488c99c39c7e035cb\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:35:16.83441456Z\",\n \"end\": \"2019-06-26T12:35:17.83441456Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d13667488c99c39c7e035ca\",\n \"sid\": 749,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:35:00.641021387Z\",\n \"completedOn\": \"2019-06-26T12:35:01.053200025Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d13667488c99c39c7e035ca\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:35:00.660190186Z\",\n \"end\": \"2019-06-26T12:35:00.673764771Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13667488c99c39c7e035ca\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:00.659797932Z\",\n \"end\": \"2019-06-26T12:35:00.674257989Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13667488c99c39c7e035ca\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:35:00.659761839Z\",\n \"end\": \"2019-06-26T12:35:00.67574448Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13667488c99c39c7e035ca\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:35:00.660081764Z\",\n \"end\": \"2019-06-26T12:35:00.759848309Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13667488c99c39c7e035ca\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:35:00.65974972Z\",\n \"end\": \"2019-06-26T12:35:00.954683874Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13667488c99c39c7e035ca\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:35:00.659914748Z\",\n \"end\": \"2019-06-26T12:35:01.023300541Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13667488c99c39c7e035ca\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:35:00.660013089Z\",\n \"end\": \"2019-06-26T12:35:01.04479953Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13667488c99c39c7e035ca\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:35:01.04489761Z\",\n \"end\": \"2019-06-26T12:35:02.04489761Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d13666f88c99c39c7e035c9\",\n \"sid\": 748,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:34:55.183513453Z\",\n \"completedOn\": \"2019-06-26T12:34:55.587285602Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d13666f88c99c39c7e035c9\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:34:55.202709205Z\",\n \"end\": \"2019-06-26T12:34:55.216733492Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13666f88c99c39c7e035c9\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:34:55.202519146Z\",\n \"end\": \"2019-06-26T12:34:55.217455074Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13666f88c99c39c7e035c9\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:34:55.202328231Z\",\n \"end\": \"2019-06-26T12:34:55.218917973Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13666f88c99c39c7e035c9\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:34:55.202607882Z\",\n \"end\": \"2019-06-26T12:34:55.301611205Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13666f88c99c39c7e035c9\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:34:55.202384942Z\",\n \"end\": \"2019-06-26T12:34:55.498331087Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13666f88c99c39c7e035c9\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:34:55.202353422Z\",\n \"end\": \"2019-06-26T12:34:55.555689189Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13666f88c99c39c7e035c9\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:34:55.202502759Z\",\n \"end\": \"2019-06-26T12:34:55.580388211Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d13666f88c99c39c7e035c9\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:34:55.580485327Z\",\n \"end\": \"2019-06-26T12:34:56.580485327Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d1365db88c99c39c7e035c8\",\n \"sid\": 747,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-26T12:32:27.069205041Z\",\n \"completedOn\": \"2019-06-26T12:32:57.44510495Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-06-26T12:32:27.088907966Z\",\n \"end\": \"2019-06-26T12:32:27.66461332Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:32:27.664647069Z\",\n \"end\": \"2019-06-26T12:32:54.686692436Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:32:27.664637109Z\",\n \"end\": \"2019-06-26T12:32:54.690917335Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:32:27.664636845Z\",\n \"end\": \"2019-06-26T12:32:54.69215925Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:32:27.664643156Z\",\n \"end\": \"2019-06-26T12:32:54.694759299Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:32:27.664628096Z\",\n \"end\": \"2019-06-26T12:32:54.696277684Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:32:27.664642199Z\",\n \"end\": \"2019-06-26T12:32:54.697484027Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:32:27.664623714Z\",\n \"end\": \"2019-06-26T12:32:54.70821914Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8:i-05380f1c7a452e464\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-26T12:32:56Z\",\n \"end\": \"2019-06-26T12:32:55Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8:i-0c2dd49aa1b3b24dd\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-26T12:32:56Z\",\n \"end\": \"2019-06-26T12:32:55Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8:i-07eb0664ef9971de2\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-26T12:32:56Z\",\n \"end\": \"2019-06-26T12:32:55Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8:i-00b7d1f671a9f301f\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-26T12:32:56Z\",\n \"end\": \"2019-06-26T12:32:55Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8:i-03a518f2236344776\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-26T12:32:56Z\",\n \"end\": \"2019-06-26T12:32:55Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8:i-0923b40e7bd08b95b\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-26T12:32:56Z\",\n \"end\": \"2019-06-26T12:32:55Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8:i-00dd8b0f4fb2351aa\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-26T12:32:56Z\",\n \"end\": \"2019-06-26T12:32:55Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:32:56.714555334Z\",\n \"end\": \"2019-06-26T12:32:56.733009597Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-26T12:32:56.714590857Z\",\n \"end\": \"2019-06-26T12:32:56.734034387Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-26T12:32:56.714540007Z\",\n \"end\": \"2019-06-26T12:32:56.734869174Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-26T12:32:56.709196997Z\",\n \"end\": \"2019-06-26T12:32:57.070987354Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-26T12:32:56.700652878Z\",\n \"end\": \"2019-06-26T12:32:57.102450008Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-26T12:32:56.71238657Z\",\n \"end\": \"2019-06-26T12:32:57.170204586Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-26T12:32:56.724732272Z\",\n \"end\": \"2019-06-26T12:32:57.42444112Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d1365db88c99c39c7e035c8\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-26T12:32:57.424554674Z\",\n \"end\": \"2019-06-26T12:32:58.424554674Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d12275f88c99c39c7e035ab\",\n \"sid\": 746,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-25T13:53:35.934295885Z\",\n \"completedOn\": \"2019-06-25T13:53:37.352789356Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d12275f88c99c39c7e035ab\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-25T13:53:37.283517817Z\",\n \"end\": \"2019-06-25T13:53:37.347316169Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d12275f88c99c39c7e035ab\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-25T13:53:37.347402771Z\",\n \"end\": \"2019-06-25T13:53:38.347402771Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d12274388c99c39c7e035aa\",\n \"sid\": 745,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-25T13:53:07.300891615Z\",\n \"completedOn\": \"2019-06-25T13:53:37.283456176Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d12274388c99c39c7e035aa\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-06-25T13:53:07.308427147Z\",\n \"end\": \"2019-06-25T13:53:07.952482742Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d12274388c99c39c7e035aa\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-25T13:53:07.952490888Z\",\n \"end\": \"2019-06-25T13:53:34.970294446Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d12274388c99c39c7e035aa:i-07eb0664ef9971de2\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-25T13:53:36Z\",\n \"end\": \"2019-06-25T13:53:35Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d12274388c99c39c7e035aa\",\n \"instanceID\": \"10.1.55.225:20190526;\",\n \"name\": \"Search\",\n \"message\": \"Event count 14658214;\",\n \"start\": \"2019-06-25T13:53:36.981740391Z\",\n \"end\": \"2019-06-25T13:53:37.277498522Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d12274388c99c39c7e035aa\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-25T13:53:37.277593916Z\",\n \"end\": \"2019-06-25T13:53:38.277593916Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d12257888c99c39c7e035a8\",\n \"sid\": 744,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-25T13:45:28.42040377Z\",\n \"completedOn\": \"2019-06-25T13:45:58.063286709Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d12257888c99c39c7e035a8\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-06-25T13:45:28.426717053Z\",\n \"end\": \"2019-06-25T13:45:28.925215792Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d12257888c99c39c7e035a8\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-25T13:45:28.925235771Z\",\n \"end\": \"2019-06-25T13:45:55.942366127Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d12257888c99c39c7e035a8:i-05380f1c7a452e464\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-25T13:45:57Z\",\n \"end\": \"2019-06-25T13:45:56Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d12257888c99c39c7e035a8\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Search\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-25T13:45:57.953175733Z\",\n \"end\": \"2019-06-25T13:45:58.056548619Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d12257888c99c39c7e035a8\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-25T13:45:58.056646532Z\",\n \"end\": \"2019-06-25T13:45:59.056646532Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d0f09efb49ea54d8b9467f0\",\n \"sid\": 743,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-23T05:11:11.386154802Z\",\n \"completedOn\": \"2019-06-23T05:12:04.902462324Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d0f09efb49ea54d8b9467f0\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-06-23T05:11:11.390483938Z\",\n \"end\": \"2019-06-23T05:11:12.665580414Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0f09efb49ea54d8b9467f0\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-23T05:11:12.665588354Z\",\n \"end\": \"2019-06-23T05:12:03.689191205Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0f09efb49ea54d8b9467f0:i-00b7d1f671a9f301f\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 0.0 MBS size: 0MB, duration: 0.1 seconds \",\n \"start\": \"2019-06-23T05:12:04Z\",\n \"end\": \"2019-06-23T05:12:03Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d0f09efb49ea54d8b9467f0:i-00b7d1f671a9f301f\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 0.0 MBS size: 0MB, duration: 0.0 seconds \",\n \"start\": \"2019-06-23T05:12:03Z\",\n \"end\": \"2019-06-23T05:12:03Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d0f09efb49ea54d8b9467f0:i-00b7d1f671a9f301f\",\n \"instanceID\": \"10.1.78.6:overflow;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-06-23T05:12:04Z\",\n \"end\": \"2019-06-23T05:12:03Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0f09efb49ea54d8b9467f0\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-06-23T05:12:04.896462161Z\",\n \"end\": \"2019-06-23T05:12:05.896462161Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d0f09b7b49ea54d8b9467ee\",\n \"sid\": 742,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-23T05:10:15.023585823Z\",\n \"completedOn\": \"2019-06-23T05:11:11.383353265Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d0f09b7b49ea54d8b9467ee\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-06-23T05:10:15.029317589Z\",\n \"end\": \"2019-06-23T05:10:16.019386806Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0f09b7b49ea54d8b9467ee\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 7070501;\",\n \"start\": \"2019-06-23T05:10:16.019395466Z\",\n \"end\": \"2019-06-23T05:11:07.04245425Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0f09b7b49ea54d8b9467ee:i-05380f1c7a452e464\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 300.7 MBS size: 145MB, duration: 0.5 seconds \",\n \"start\": \"2019-06-23T05:11:08Z\",\n \"end\": \"2019-06-23T05:11:07Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d0f09b7b49ea54d8b9467ee:i-05380f1c7a452e464\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 336.1 MBS size: 434MB, duration: 1.3 seconds \",\n \"start\": \"2019-06-23T05:11:07Z\",\n \"end\": \"2019-06-23T05:11:08Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d0f09b7b49ea54d8b9467ee:i-05380f1c7a452e464\",\n \"instanceID\": \"10.1.155.152:20190616;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-06-23T05:11:10Z\",\n \"end\": \"2019-06-23T05:11:10Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0f09b7b49ea54d8b9467ee\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-06-23T05:11:11.376210762Z\",\n \"end\": \"2019-06-23T05:11:12.376210762Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d0b2bc8b49ea54d8b9467c7\",\n \"sid\": 740,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-20T06:46:32.599310715Z\",\n \"completedOn\": \"2019-06-20T06:47:31.909728894Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d0b2bc8b49ea54d8b9467c7\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-06-20T06:46:32.603931101Z\",\n \"end\": \"2019-06-20T06:46:33.644020294Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0b2bc8b49ea54d8b9467c7\",\n \"instanceID\": \"10.1.198.74:20190512;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 17218374;\",\n \"start\": \"2019-06-20T06:46:33.644029147Z\",\n \"end\": \"2019-06-20T06:47:24.66411646Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0b2bc8b49ea54d8b9467c7:i-0e25e2f7f59cb2e6d\",\n \"instanceID\": \"10.1.198.74:20190512;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 128.9 MBS size: 283MB, duration: 2.2 seconds \",\n \"start\": \"2019-06-20T06:47:24Z\",\n \"end\": \"2019-06-20T06:47:26Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d0b2bc8b49ea54d8b9467c7:i-0e25e2f7f59cb2e6d\",\n \"instanceID\": \"10.1.198.74:20190512;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 420.1 MBS size: 900MB, duration: 2.1 seconds \",\n \"start\": \"2019-06-20T06:47:28Z\",\n \"end\": \"2019-06-20T06:47:29Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d0b2bc8b49ea54d8b9467c7:i-0e25e2f7f59cb2e6d\",\n \"instanceID\": \"10.1.198.74:20190512;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-06-20T06:47:29Z\",\n \"end\": \"2019-06-20T06:47:30Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0b2bc8b49ea54d8b9467c7\",\n \"instanceID\": \"10.1.198.74:20190512;\",\n \"name\": \"Search\",\n \"message\": \"Event count 17218374;\",\n \"start\": \"2019-06-20T06:47:31.826287813Z\",\n \"end\": \"2019-06-20T06:47:31.904548468Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0b2bc8b49ea54d8b9467c7\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-20T06:47:31.904653435Z\",\n \"end\": \"2019-06-20T06:47:32.904653435Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d0a5d38b49ea54d8b9467b3\",\n \"sid\": 739,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-19T16:05:12.197297075Z\",\n \"completedOn\": \"2019-06-19T16:05:42.379407762Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d0a5d38b49ea54d8b9467b3\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-06-19T16:05:12.202915728Z\",\n \"end\": \"2019-06-19T16:05:12.919247376Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a5d38b49ea54d8b9467b3\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-19T16:05:12.919258321Z\",\n \"end\": \"2019-06-19T16:05:39.944115665Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a5d38b49ea54d8b9467b3:i-00dd8b0f4fb2351aa\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-19T16:05:41Z\",\n \"end\": \"2019-06-19T16:05:40Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a5d38b49ea54d8b9467b3\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-19T16:05:41.954107914Z\",\n \"end\": \"2019-06-19T16:05:42.375055992Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a5d38b49ea54d8b9467b3\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-19T16:05:42.375161402Z\",\n \"end\": \"2019-06-19T16:05:43.375161402Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d0a5847b49ea54d8b9467ad\",\n \"sid\": 738,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-19T15:44:07.487595074Z\",\n \"completedOn\": \"2019-06-19T15:44:07.597187977Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d0a5847b49ea54d8b9467ad\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-19T15:44:07.496365424Z\",\n \"end\": \"2019-06-19T15:44:07.505672961Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a5847b49ea54d8b9467ad\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-19T15:44:07.496210363Z\",\n \"end\": \"2019-06-19T15:44:07.593715249Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a5847b49ea54d8b9467ad\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-19T15:44:07.59382996Z\",\n \"end\": \"2019-06-19T15:44:08.59382996Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d0a5835b49ea54d8b9467ac\",\n \"sid\": 737,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-19T15:43:49.715667264Z\",\n \"completedOn\": \"2019-06-19T15:43:49.798532766Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d0a5835b49ea54d8b9467ac\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-19T15:43:49.725002639Z\",\n \"end\": \"2019-06-19T15:43:49.733734415Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a5835b49ea54d8b9467ac\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-19T15:43:49.724948116Z\",\n \"end\": \"2019-06-19T15:43:49.795498785Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a5835b49ea54d8b9467ac\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-19T15:43:49.795606353Z\",\n \"end\": \"2019-06-19T15:43:50.795606353Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d0a57ebb49ea54d8b9467aa\",\n \"sid\": 736,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-19T15:42:35.472594371Z\",\n \"completedOn\": \"2019-06-19T15:42:35.535898931Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d0a57ebb49ea54d8b9467aa\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-19T15:42:35.480878245Z\",\n \"end\": \"2019-06-19T15:42:35.48927422Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a57ebb49ea54d8b9467aa\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-19T15:42:35.480717173Z\",\n \"end\": \"2019-06-19T15:42:35.533663704Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a57ebb49ea54d8b9467aa\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-19T15:42:35.533767373Z\",\n \"end\": \"2019-06-19T15:42:36.533767373Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d0a57aab49ea54d8b9467a9\",\n \"sid\": 735,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-19T15:41:30.597108033Z\",\n \"completedOn\": \"2019-06-19T15:42:00.252765521Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d0a57aab49ea54d8b9467a9\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-06-19T15:41:30.607712213Z\",\n \"end\": \"2019-06-19T15:41:31.085092346Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a57aab49ea54d8b9467a9\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-19T15:41:31.08510117Z\",\n \"end\": \"2019-06-19T15:41:58.101616202Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a57aab49ea54d8b9467a9\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-19T15:41:31.085110614Z\",\n \"end\": \"2019-06-19T15:41:58.102159774Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a57aab49ea54d8b9467a9:i-0c2dd49aa1b3b24dd\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-19T15:42:00Z\",\n \"end\": \"2019-06-19T15:41:59Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a57aab49ea54d8b9467a9:i-03a518f2236344776\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-19T15:42:00Z\",\n \"end\": \"2019-06-19T15:41:59Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a57aab49ea54d8b9467a9\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-19T15:42:00.113823642Z\",\n \"end\": \"2019-06-19T15:42:00.124361055Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a57aab49ea54d8b9467a9\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-19T15:42:00.113390027Z\",\n \"end\": \"2019-06-19T15:42:00.245791943Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0a57aab49ea54d8b9467a9\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-19T15:42:00.245907657Z\",\n \"end\": \"2019-06-19T15:42:01.245907657Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d08d780b49ea54d8b946795\",\n \"sid\": 734,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-18T12:22:24.018667646Z\",\n \"completedOn\": \"2019-06-18T12:22:53.649998845Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d08d780b49ea54d8b946795\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-06-18T12:22:24.025216359Z\",\n \"end\": \"2019-06-18T12:22:24.469262067Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d08d780b49ea54d8b946795\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-18T12:22:24.46927023Z\",\n \"end\": \"2019-06-18T12:22:51.485734025Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d08d780b49ea54d8b946795:i-00dd8b0f4fb2351aa\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-18T12:22:53Z\",\n \"end\": \"2019-06-18T12:22:52Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d08d780b49ea54d8b946795\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-18T12:22:53.499868713Z\",\n \"end\": \"2019-06-18T12:22:53.644993781Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d08d780b49ea54d8b946795\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-18T12:22:53.645092705Z\",\n \"end\": \"2019-06-18T12:22:54.645092705Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d08115fb49ea54d8b946787\",\n \"sid\": 733,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-17T22:17:03.198229088Z\",\n \"completedOn\": \"2019-06-17T22:17:03.233698226Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d08115fb49ea54d8b946787\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-17T22:17:03.207325343Z\",\n \"end\": \"2019-06-17T22:17:03.215716871Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d08115fb49ea54d8b946787\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-17T22:17:03.207376054Z\",\n \"end\": \"2019-06-17T22:17:03.230621055Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d08115fb49ea54d8b946787\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-17T22:17:03.230708032Z\",\n \"end\": \"2019-06-17T22:17:04.230708032Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d081134b49ea54d8b946786\",\n \"sid\": 732,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-17T22:16:20.626975192Z\",\n \"completedOn\": \"2019-06-17T22:16:50.511309812Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d081134b49ea54d8b946786\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-06-17T22:16:20.634505315Z\",\n \"end\": \"2019-06-17T22:16:21.135050419Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d081134b49ea54d8b946786\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-17T22:16:21.135071762Z\",\n \"end\": \"2019-06-17T22:16:48.152668886Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d081134b49ea54d8b946786\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-17T22:16:21.135060483Z\",\n \"end\": \"2019-06-17T22:16:48.153168699Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d081134b49ea54d8b946786:i-03a518f2236344776\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-17T22:16:50Z\",\n \"end\": \"2019-06-17T22:16:49Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d081134b49ea54d8b946786:i-0c2dd49aa1b3b24dd\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-17T22:16:50Z\",\n \"end\": \"2019-06-17T22:16:49Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d081134b49ea54d8b946786\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Search\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-17T22:16:50.163658838Z\",\n \"end\": \"2019-06-17T22:16:50.173047197Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d081134b49ea54d8b946786\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Search\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-17T22:16:50.16602025Z\",\n \"end\": \"2019-06-17T22:16:50.504952893Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d081134b49ea54d8b946786\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-17T22:16:50.505054074Z\",\n \"end\": \"2019-06-17T22:16:51.505054074Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d0782d4b49ea54d8b94676d\",\n \"sid\": 730,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-17T12:08:52.790980598Z\",\n \"completedOn\": \"2019-06-17T12:09:22.423274936Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d0782d4b49ea54d8b94676d\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Start Instances\",\n \"message\": \"Instanes Started\",\n \"start\": \"2019-06-17T12:08:52.797270659Z\",\n \"end\": \"2019-06-17T12:08:53.269756051Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0782d4b49ea54d8b94676d\",\n \"instanceID\": \"10.1.222.73:20190512;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 17218374;\",\n \"start\": \"2019-06-17T12:08:53.269770296Z\",\n \"end\": \"2019-06-17T12:09:20.286697005Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0782d4b49ea54d8b94676d:i-0521d6003eaf1a6a2\",\n \"instanceID\": \"10.1.222.73:20190512;\",\n \"name\": \"Loaded\",\n \"message\": \"Hit cache\",\n \"start\": \"2019-06-17T12:09:22Z\",\n \"end\": \"2019-06-17T12:09:21Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0782d4b49ea54d8b94676d\",\n \"instanceID\": \"10.1.222.73:20190512;\",\n \"name\": \"Search\",\n \"message\": \"Event count 17218374;\",\n \"start\": \"2019-06-17T12:09:22.29801714Z\",\n \"end\": \"2019-06-17T12:09:22.418127353Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d0782d4b49ea54d8b94676d\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Search Completed\",\n \"message\": \"Search Completed\",\n \"start\": \"2019-06-17T12:09:22.418228845Z\",\n \"end\": \"2019-06-17T12:09:23.418228845Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d05cf7488c99c12afa2893f\",\n \"sid\": 729,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-16T05:11:16.172085853Z\",\n \"completedOn\": \"2019-06-16T05:12:09.291771314Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d05cf7488c99c12afa2893f\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-06-16T05:11:16.177058181Z\",\n \"end\": \"2019-06-16T05:11:17.179195764Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d05cf7488c99c12afa2893f\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 3;\",\n \"start\": \"2019-06-16T05:11:17.179205109Z\",\n \"end\": \"2019-06-16T05:12:08.201207183Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d05cf7488c99c12afa2893f:i-0923b40e7bd08b95b\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 0.0 MBS size: 0MB, duration: 0.1 seconds \",\n \"start\": \"2019-06-16T05:12:09Z\",\n \"end\": \"2019-06-16T05:12:08Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d05cf7488c99c12afa2893f:i-0923b40e7bd08b95b\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 0.0 MBS size: 0MB, duration: 0.0 seconds \",\n \"start\": \"2019-06-16T05:12:09Z\",\n \"end\": \"2019-06-16T05:12:08Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d05cf7488c99c12afa2893f:i-0923b40e7bd08b95b\",\n \"instanceID\": \"10.1.21.149:overflow;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-06-16T05:12:09Z\",\n \"end\": \"2019-06-16T05:12:08Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d05cf7488c99c12afa2893f\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-06-16T05:12:09.286113665Z\",\n \"end\": \"2019-06-16T05:12:10.286113665Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5d05cf3a88c99c12afa2893d\",\n \"sid\": 728,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-16T05:10:18.51250613Z\",\n \"completedOn\": \"2019-06-16T05:11:16.179440769Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5d05cf3a88c99c12afa2893d\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-06-16T05:10:18.517996418Z\",\n \"end\": \"2019-06-16T05:10:19.771118198Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d05cf3a88c99c12afa2893d\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13780988;\",\n \"start\": \"2019-06-16T05:10:19.771127256Z\",\n \"end\": \"2019-06-16T05:11:10.79338112Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d05cf3a88c99c12afa2893d:i-00dd8b0f4fb2351aa\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 334.1 MBS size: 240MB, duration: 0.7 seconds \",\n \"start\": \"2019-06-16T05:11:12Z\",\n \"end\": \"2019-06-16T05:11:11Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d05cf3a88c99c12afa2893d:i-00dd8b0f4fb2351aa\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 414.8 MBS size: 749MB, duration: 1.8 seconds \",\n \"start\": \"2019-06-16T05:11:12Z\",\n \"end\": \"2019-06-16T05:11:13Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5d05cf3a88c99c12afa2893d:i-00dd8b0f4fb2351aa\",\n \"instanceID\": \"10.1.17.68:20190609;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-06-16T05:11:14Z\",\n \"end\": \"2019-06-16T05:11:15Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5d05cf3a88c99c12afa2893d\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-06-16T05:11:16.168681931Z\",\n \"end\": \"2019-06-16T05:11:17.168681931Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5cfc94f088c99c12afa288de\",\n \"sid\": 727,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-09T05:11:12.007693844Z\",\n \"completedOn\": \"2019-06-09T05:12:05.705460093Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5cfc94f088c99c12afa288de\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-06-09T05:11:12.010746627Z\",\n \"end\": \"2019-06-09T05:11:12.985348115Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5cfc94f088c99c12afa288de\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 6;\",\n \"start\": \"2019-06-09T05:11:12.98535793Z\",\n \"end\": \"2019-06-09T05:12:04.004302432Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5cfc94f088c99c12afa288de:i-03a518f2236344776\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 0.0 MBS size: 0MB, duration: 0.2 seconds \",\n \"start\": \"2019-06-09T05:12:05Z\",\n \"end\": \"2019-06-09T05:12:04Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5cfc94f088c99c12afa288de:i-03a518f2236344776\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 0.0 MBS size: 0MB, duration: 0.2 seconds \",\n \"start\": \"2019-06-09T05:12:05Z\",\n \"end\": \"2019-06-09T05:12:04Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5cfc94f088c99c12afa288de:i-03a518f2236344776\",\n \"instanceID\": \"10.1.142.208:overflow;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-06-09T05:12:05Z\",\n \"end\": \"2019-06-09T05:12:04Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5cfc94f088c99c12afa288de\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-06-09T05:12:05.700700444Z\",\n \"end\": \"2019-06-09T05:12:06.700700444Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n },\n {\n \"id\": \"5cfc94b688c99c12afa288dc\",\n \"sid\": 726,\n \"username\": \"aladdin\",\n \"createdOn\": \"2019-06-09T05:10:14.508847746Z\",\n \"completedOn\": \"2019-06-09T05:11:12.005992056Z\",\n \"dbName\": \"terplab\",\n \"indexName\": \"default\",\n \"events\": [\n {\n \"taskID\": \"5cfc94b688c99c12afa288dc\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Create Instances\",\n \"message\": \"Instanes created\",\n \"start\": \"2019-06-09T05:10:14.51319887Z\",\n \"end\": \"2019-06-09T05:10:15.486811699Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5cfc94b688c99c12afa288dc\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Launch\",\n \"message\": \"Event count 13259592;\",\n \"start\": \"2019-06-09T05:10:15.486819886Z\",\n \"end\": \"2019-06-09T05:11:06.503766752Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5cfc94b688c99c12afa288dc:i-0c2dd49aa1b3b24dd\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Download\",\n \"message\": \"s3 download bandwidth 243.1 MBS size: 241MB, duration: 1.0 seconds \",\n \"start\": \"2019-06-09T05:11:07Z\",\n \"end\": \"2019-06-09T05:11:07Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5cfc94b688c99c12afa288dc:i-0c2dd49aa1b3b24dd\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Decompression\",\n \"message\": \"index decompression bandwidth 431.7 MBS size: 750MB, duration: 1.7 seconds \",\n \"start\": \"2019-06-09T05:11:08Z\",\n \"end\": \"2019-06-09T05:11:09Z\",\n \"error\": \"\",\n \"done\": false\n },\n {\n \"taskID\": \"5cfc94b688c99c12afa288dc:i-0c2dd49aa1b3b24dd\",\n \"instanceID\": \"10.1.25.194:20190602;\",\n \"name\": \"Create Reader\",\n \"message\": \"Create Reader\",\n \"start\": \"2019-06-09T05:11:09Z\",\n \"end\": \"2019-06-09T05:11:10Z\",\n \"error\": \"\",\n \"done\": true\n },\n {\n \"taskID\": \"5cfc94b688c99c12afa288dc\",\n \"instanceID\": \"Search Controller\",\n \"name\": \"Loading Completed\",\n \"message\": \"Loading Completed\",\n \"start\": \"2019-06-09T05:11:12.000079828Z\",\n \"end\": \"2019-06-09T05:11:13.000079828Z\",\n \"error\": \"\",\n \"done\": true\n }\n ],\n \"status\": \"completed\"\n }\n ],\n \"total\": 128\n }\n}"}],"_postman_id":"2a6ed0b3-7840-49ee-9164-9a210bf633f4"},{"name":"Get/Delete DB Task","event":[{"listen":"test","script":{"id":"640ad3e8-d541-4c91-a494-2c74d8d036ed","exec":["pm.test(\"Status code is 200\", function () {"," pm.response.to.have.status(200);","});","","pm.test(\"Verdict of search was OK\", function () {"," var jsonData = pm.response.json();"," pm.expect(jsonData.verdict).to.eql('OK');","});","","pm.test(\"Content-Type of response if applciation/json\", function () {"," pm.response.to.have.header(\"Content-Type\");"," pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","});",""],"type":"text/javascript"}},{"listen":"prerequest","script":{"id":"a7b76890-7728-465e-8d77-2d10f4de1e88","exec":["pm.environment.set(\"taskID\", 855)"],"type":"text/javascript"}}],"id":"ae412359-b4b7-439f-a767-cb90a5afb45d","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","type":"text","value":"{{fluencytoken}}"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"resource\": \"SearchTask\",\n \"type\": \"GET_ONE\",\n \"args\": {\n \"id\": {{taskID}}\n }\n }\n}"},"url":"{{baseUrl}}/api/ds/aladdin_dao","description":"

Get or delete a DB task, change kargs.type and kargs.args accordingly (where IDNUM is the task ID)

Get Task:
- type: \"GET_ONE\"
- args: {\"id\": IDNUM}
\n
Delete Task:
- type: \"DELETE\"
- args: {\"ids\": IDNUM}
\n

Database-related operations

\n","_postman_id":"c43b1d0d-f0ba-41f5-a751-c42febdf0e6b","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"List of All API Calls","item":[{"name":"List Facets Copy","id":"608e4c4f-ac59-46a4-9f6b-afb7b68a10cf","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"fluencytoken","value":"{{fluencytoken}}","type":"text"}],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"action\": \"list\",\n \"args\": {}\n }\n}"},"url":"{{baseUrl}}/api/ds/facet_config","description":"

Get a list of the facets available.

This call retrieves risk score events.

There are two type tags: issues (originally called incidents) and informational tags (or just tags). Incident tags are issues that are being tracked.

Get a list of trending information over a number of days.

The data needed to create the Sankey diagram.

The collection of histogram charts is done with a single call.

Bucket Groups include:

normal:service
tag
alert
stream:import
scanner:service
applications
status_fusion
status_loader
tls_fingerprints

Provides a detailed list of filters.

Get a list of all incidents (issues), tags and labels.

This will delete a tag. When deleting the system needs the data type of artifact (dtype) and the value (key) of the artifcat.

When filters are listed, there is an ID used that is unique. This ID is also needed.

Retrieves an array of alert filers. This call requires aministrative rights.

This routine provides detailed information of flow events over a period of time. This also provides the data for this range of a more detailed histogram.

Get an array of hits that contains a summary for each seen IP address.

This call retrieves high level data of an IP address (IP artifact). It can only review one address at a time, but unlike recent, it covers multiple days of activity.

Provides a list of passive hostnames that are assocaited with the IP address.

List all collectors stored in system

List all pipes for a given collector

Add a data collector

Retrieves the specified collector's configurations in the Fluency Security Bus (FSB)

Loads Vulcan Configuration for given collector

Delete the specified collector by collector ID

Add or Modify Input, Data Saving, or Data Discard Rule, modify the streamId (and filter_chain) options in kargs accordingly

Add: Use kargs.location
Update: Use kargs.pipeId (use ID of specified rule)
kargs.streamId parameters:
- Input: \"input\"
- Data Saving: \"save\"
- Data Discard: \"discard\"
\n

Delete the input, data saving, or data discard rule given the rule ID. Modify kargs.streamId accordingly based on type of rule:

Input: \"input\"
Data Saving: \"save\"
Data Discard: \"discard\"

Retrieve VirusTotal status (currently just a color indicator)

List all AWS users for configurating new AWS tools (not for configuration of new user, however)

Get AWS Cloudtrail given Cloudtrail ID

Add or update an AWS Cloudtrail. Modify kargs accordingly, specifically:

Add: don't add anything below:
Update:
- kargs.id: (id of cloudtrail)
- kargs.entry.status: (status of cloudtrail)
- kargs.entry.index: (index of cloudtrail in DB)
\n

Call to add a risk filter for both whitelist and domain whitelist. For domain whitelist addition, add the kargs.args.domain parameter value.

List the audit events.

Call to create a new user in the system. Note that the code listed here is just an example user addition, and customizations can be made (e.g. RADIUS, OAuth permissions)

Retrieves the selected user's information by username

This call updates a user's information. Some options are not able to be edited after initial creation of user.

This call suspends a user's account, which disables their usage of the product.

Deletes a user from the system

Get Segment Schema for specified schema

Get the local and public IP addresses of the system.

Retuerns a list of evnet watch buckets.

Event Watch (live analytics) creates the histogram data used by the reports. You can get a list of the evnt watch agents with this command.

This API gets a list of

all the available buckets
attributes of the bucket to include bucketAggregations, which contains all the sub-buckets.

The ability to use a facet and search string to select a list of event buckets.

Retieve the histrogram for a given bucket.

Retrieve an existing Correlation Rule.

THe action in the body of the request can be sent 'list'. When set to list, all correlation rules are returned.

The action in the body of the request can be set to 'list'. When set to list, all action lambdas will be returned.

Feature is used for management and debugging. Gives insight to what correlation rules are triggering and the attributes the instance contain.

The action in the body of the request can be set to 'list'. When set to list, a summary of all case lambdas will be returned.

The action in the body of the request can be set to 'list'. When set to list, a list of all workflow case nodes will be returned.

The action in the body of the request is a 'duration'. When set to list, a list of all instances of cases will be returned. Durations are performed in hours (h). So a weeks worth of data is -168h.

The action in the body of the request can be set to 'list'. When set to list, a list of all instances of cases will be returned.

The action in the body of the request can be set to 'list'. When set to list, a summary of all action scripts will be returned.

Event Watch uses a percolator to select records to be placed into a sliding window. Elements of the event are stored to generate histograms and to generate signals. The event watch process enable rule based behavioral analytics and case management. This is an update to the Event Watch API listed above.

\n","event":[{"listen":"prerequest","script":{"id":"7a17b07f-1b2f-4813-876e-cb98c55cc336","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"1b0b556e-10e6-42bb-91fa-3609d76342ca","type":"text/javascript","exec":[""]}}],"_postman_id":"c5a7ea7a-cd53-4874-849a-b76780542004","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Signal Alarms","item":[{"name":"Update Case Management","id":"d3df87cc-3ef0-417b-888e-1e55a2d7260a","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[],"url":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"query":[],"variable":[]}},"response":[],"_postman_id":"d3df87cc-3ef0-417b-888e-1e55a2d7260a"}],"id":"61cda292-d48a-40a3-bcf1-904a95124240","description":"

Managing the Signal Alarm records.

\n","_postman_id":"61cda292-d48a-40a3-bcf1-904a95124240","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"Resources","item":[{"name":"Get Grid Accounts","id":"60261130-11c2-4e86-b711-7c31b0c2fa5c","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[],"body":{"mode":"raw","raw":"{\"kargs\":{}}"},"url":"{{baseUrl}}/api/ds/get_system_config","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","get_system_config"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"60261130-11c2-4e86-b711-7c31b0c2fa5c"},{"name":"Resource Search","id":"3d9f0082-da5f-46d8-aa0a-31ca7f37504c","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"resource\": \"sentinelOneAgent\",\n \"customer\": \"_all_\",\n \"options\": {\n \"fetchOffset\": 0,\n \"fetchLimit\": 20,\n \"searchStr\": \"\",\n \"facets\": {\n \"facets\": [{\n \"title\": \"Customer\",\n \"size\": 10,\n \"order\": \"count\",\n \"field\": \"@customer\"\n }, {\n \"title\": \"Behaviors\",\n \"size\": 10,\n \"order\": \"count\",\n \"field\": \"@behaviors\"\n }, {\n \"title\": \"MachineType\",\n \"size\": 10,\n \"order\": \"count\",\n \"field\": \"@sentinelOneAgent.machineType\"\n }, {\n \"title\": \"GroupName\",\n \"size\": 30,\n \"order\": \"count\",\n \"field\": \"@sentinelOneAgent.groupName\"\n }, {\n \"title\": \"SiteName\",\n \"size\": 30,\n \"order\": \"count\",\n \"field\": \"@sentinelOneAgent.siteName\"\n }, {\n \"title\": \"OSName\",\n \"size\": 30,\n \"order\": \"count\",\n \"field\": \"@sentinelOneAgent.osName\"\n }, {\n \"title\": \"AccountName\",\n \"size\": 30,\n \"order\": \"count\",\n \"field\": \"@sentinelOneAgent.accountName\"\n }, {\n \"title\": \"VulnerabilityStatus\",\n \"size\": 30,\n \"order\": \"count\",\n \"field\": \"@sentinelOneAgent.appsVulnerabilityStatus\"\n }, {\n \"title\": \"Infected\",\n \"size\": 30,\n \"order\": \"count\",\n \"field\": \"@sentinelOneAgent.infected\"\n }, {\n \"title\": \"IsUpToDate\",\n \"size\": 30,\n \"order\": \"count\",\n \"field\": \"@sentinelOneAgent.isUpToDate\"\n }, {\n \"title\": \"AgentVersion\",\n \"size\": 30,\n \"order\": \"count\",\n \"field\": \"@sentinelOneAgent.agentVersion\"\n }],\n \"mustFilters\": [],\n \"mustNotFilters\": []\n }\n }\n }\n}"},"url":"{{baseUrl}}/api/ds/resource_search","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","resource_search"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"3d9f0082-da5f-46d8-aa0a-31ca7f37504c"},{"name":"Get System Configuration","id":"0ec8cdf9-87ef-4707-a3ce-cd69838e42e9","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[],"body":{"mode":"raw","raw":"{\"kargs\":{}}"},"url":"{{baseUrl}}/api/grid/get_grid_accounts","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","grid","get_grid_accounts"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"0ec8cdf9-87ef-4707-a3ce-cd69838e42e9"}],"id":"609b90ac-8c28-476d-9d67-816808133d9f","_postman_id":"609b90ac-8c28-476d-9d67-816808133d9f","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}},{"name":"BehavioralSummary","item":[{"name":"SummaryList","id":"8a98e08d-e19e-47bf-907a-11cb8c7bd29e","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[],"body":{"mode":"raw","raw":"{\n \"kargs\": {\n \"options\": {\n \"fetchOffset\": 0,\n \"fetchLimit\": 5000,\n \"facets\": {\n \"facets\": [],\n \"mustFilters\": [],\n \"mustNotFilters\": []\n },\n \"searchStr\": \"riskScore:[3000 TO *]\",\n \"sortField\": \"to\",\n \"sortOrder\": \"desc\",\n \"range_from\": 1631752398872,\n \"range_to\": 1632357198872,\n \"range_field\": \"from\"\n }\n }\n}"},"url":"{{baseUrl}}/api/ds/behavior_summary_search","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}},"urlObject":{"path":["api","ds","behavior_summary_search"],"host":["{{baseUrl}}"],"query":[],"variable":[]}},"response":[],"_postman_id":"8a98e08d-e19e-47bf-907a-11cb8c7bd29e"}],"id":"7788d33e-d128-4ba2-b733-b8b04aa54e9c","_postman_id":"7788d33e-d128-4ba2-b733-b8b04aa54e9c","description":"","auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]},"isInherited":true,"source":{"_postman_id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","id":"67acddf8-41bb-4362-b7fb-ec2500db3dd8","name":"Fluency v6.6","type":"collection"}}}],"auth":{"type":"apikey","apikey":{"basicConfig":[{"key":"key","value":"fluencytoken"},{"key":"value","value":"{{fluencytoken}}"}]}},"event":[{"listen":"prerequest","script":{"id":"97ac686c-491b-429e-bc32-41513c61f669","type":"text/javascript","exec":["// Creates a four (4) hour window used for querying live data.","var d = new Date();","var n = d.getTime();","","pm.globals.set(\"startTime\", n - 3600000);","pm.globals.set(\"endTime\", n);","","n =Math.floor(n / 1000);","pm.globals.set(\"startSeconds\", n - 3600);","pm.globals.set(\"endSeconds\", n);","","var moment = require('moment')","pm.globals.set(\"dayIndex\", moment().format(\"YYYYMMDD\"));","pm.globals.set(\"indexName\", moment().format(\"default_YYYYMMDD_s\"));",""]}},{"listen":"test","script":{"id":"23c3c35d-8653-4824-8a00-f1ed6b925b65","type":"text/javascript","exec":["// Note on why there are no collection-wide tests: As Kun brought up one day, these method headers do not truly follow the RESTful API guidelines. This is why collection-wide tests were at first a feasible plan. After mentioning that Chris had actually planned to return the proper HTTP statuses, After some consideration, I have left the tests up to someone who knows the development process more than I do. They have been list down below, however, in case people are willing to try them. ~Alex, a junior minion at Fluency Security","","// pm.test(\"Status code is 200\", function () {","// pm.response.to.have.status(200);","// });","","// pm.test(\"Verdict of search was OK\", function () {","// var jsonData = pm.response.json();","// pm.expect(jsonData.verdict).to.eql('OK');","// });","","// pm.test(\"Content-Type of response if applciation/json\", function () {","// pm.response.to.have.header(\"Content-Type\");","// pm.response.to.be.header(\"Content-Type\", \"application/json; charset=utf-8\");","// });"]}}]}