{ "took": 43, "timed_out": false, "_shards": { "total": 81, "successful": 81, "failed": 0 }, "hits": { "total": 15859, "max_score": 0, "hits": [] }, "aggregations": { "timechart": { "buckets": [ { "key_as_string": "2016-12-31T10:07:00.000+02:00", "key": 1483171620000, "doc_count": 56, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 33, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.101.132", "doc_count": 2, "max_ack_pkts_sent": { "value": 12 }, "avg_ack_pkts_sent": { "value": 7 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.120", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.40.10", "doc_count": 1, "max_ack_pkts_sent": { "value": 3 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 3 } } ] } }, { "key": "0060e0634ff8", "doc_count": 23, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:07:30.000+02:00", "key": 1483171650000, "doc_count": 486, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 255, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 6, "buckets": [ { "key": "192.168.101.103", "doc_count": 10, "max_ack_pkts_sent": { "value": 207 }, "avg_ack_pkts_sent": { "value": 25.6 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.121", "doc_count": 6, "max_ack_pkts_sent": { "value": 11 }, "avg_ack_pkts_sent": { "value": 3.8333333333333335 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.132", "doc_count": 5, "max_ack_pkts_sent": { "value": 11 }, "avg_ack_pkts_sent": { "value": 3.8 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "121.78.144.42", "doc_count": 4, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 2 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.104", "doc_count": 3, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 1.3333333333333333 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e0634ff8", "doc_count": 154, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 8, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 2.625 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 25 }, "avg_ack_pkts_sent": { "value": 25 }, "min_ack_pkts_sent": { "value": 25 } } ] } }, { "key": "b827ebb95199", "doc_count": 40, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 37, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:08:00.000+02:00", "key": 1483171680000, "doc_count": 442, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 271, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 2, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 8 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 139, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 11, "buckets": [ { "key": "192.168.101.104", "doc_count": 10, "max_ack_pkts_sent": { "value": 13 }, "avg_ack_pkts_sent": { "value": 6.1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.121", "doc_count": 4, "max_ack_pkts_sent": { "value": 7 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 171 }, "avg_ack_pkts_sent": { "value": 62.666666666666664 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.125", "doc_count": 2, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.132", "doc_count": 2, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 5.5 }, "min_ack_pkts_sent": { "value": 5 } } ] } }, { "key": "b827ebb95199", "doc_count": 16, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 16, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:08:30.000+02:00", "key": 1483171710000, "doc_count": 538, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 232, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 3, "buckets": [ { "key": "192.168.101.121", "doc_count": 12, "max_ack_pkts_sent": { "value": 28 }, "avg_ack_pkts_sent": { "value": 6.583333333333333 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 54 }, "avg_ack_pkts_sent": { "value": 10.142857142857142 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.132", "doc_count": 6, "max_ack_pkts_sent": { "value": 20 }, "avg_ack_pkts_sent": { "value": 9 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.104", "doc_count": 4, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 4.75 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.40.10", "doc_count": 1, "max_ack_pkts_sent": { "value": 3 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 3 } } ] } }, { "key": "0060e0634ff8", "doc_count": 197, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 4, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 4.25 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 47 }, "avg_ack_pkts_sent": { "value": 47 }, "min_ack_pkts_sent": { "value": 47 } } ] } }, { "key": "b827ebb95199", "doc_count": 67, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 42, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:09:00.000+02:00", "key": 1483171740000, "doc_count": 375, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 179, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 5, "max_ack_pkts_sent": { "value": 118 }, "avg_ack_pkts_sent": { "value": 26.8 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 151, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 11, "buckets": [ { "key": "192.168.101.104", "doc_count": 8, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 3.375 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.121", "doc_count": 6, "max_ack_pkts_sent": { "value": 5 }, "avg_ack_pkts_sent": { "value": 2.1666666666666665 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.132", "doc_count": 6, "max_ack_pkts_sent": { "value": 12 }, "avg_ack_pkts_sent": { "value": 5.833333333333333 }, "min_ack_pkts_sent": { "value": 3 } }, { "key": "192.168.101.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 103 }, "avg_ack_pkts_sent": { "value": 40 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.125", "doc_count": 2, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 1.5 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "b827ebb95199", "doc_count": 29, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 16, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:09:30.000+02:00", "key": 1483171770000, "doc_count": 475, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 258, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 5, "buckets": [ { "key": "192.168.101.121", "doc_count": 10, "max_ack_pkts_sent": { "value": 14 }, "avg_ack_pkts_sent": { "value": 4.1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.104", "doc_count": 9, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 3.111111111111111 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 3.142857142857143 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.125", "doc_count": 3, "max_ack_pkts_sent": { "value": 18 }, "avg_ack_pkts_sent": { "value": 10.333333333333334 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.131", "doc_count": 2, "max_ack_pkts_sent": { "value": 20 }, "avg_ack_pkts_sent": { "value": 12 }, "min_ack_pkts_sent": { "value": 4 } } ] } }, { "key": "0060e0634ff8", "doc_count": 140, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 130 }, "avg_ack_pkts_sent": { "value": 48.666666666666664 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "b827ebb95199", "doc_count": 40, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 37, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:10:00.000+02:00", "key": 1483171800000, "doc_count": 564, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 362, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 8, "max_ack_pkts_sent": { "value": 77 }, "avg_ack_pkts_sent": { "value": 12.75 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 2, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 150, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 9, "buckets": [ { "key": "192.168.101.132", "doc_count": 7, "max_ack_pkts_sent": { "value": 3261 }, "avg_ack_pkts_sent": { "value": 470.7142857142857 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.104", "doc_count": 6, "max_ack_pkts_sent": { "value": 14 }, "avg_ack_pkts_sent": { "value": 6 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.121", "doc_count": 6, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 4, "max_ack_pkts_sent": { "value": 123 }, "avg_ack_pkts_sent": { "value": 37.25 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.125", "doc_count": 2, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "b827ebb95199", "doc_count": 38, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 14, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:10:30.000+02:00", "key": 1483171830000, "doc_count": 728, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 316, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 6, "buckets": [ { "key": "192.168.101.131", "doc_count": 12, "max_ack_pkts_sent": { "value": 11 }, "avg_ack_pkts_sent": { "value": 7.416666666666667 }, "min_ack_pkts_sent": { "value": 3 } }, { "key": "192.168.101.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 79 }, "avg_ack_pkts_sent": { "value": 13.285714285714286 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.104", "doc_count": 6, "max_ack_pkts_sent": { "value": 14 }, "avg_ack_pkts_sent": { "value": 4.5 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.121", "doc_count": 5, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 1.4 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "157.240.1.13", "doc_count": 1, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 6 }, "min_ack_pkts_sent": { "value": 6 } } ] } }, { "key": "0060e0634ff8", "doc_count": 300, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 4, "max_ack_pkts_sent": { "value": 35 }, "avg_ack_pkts_sent": { "value": 14.5 }, "min_ack_pkts_sent": { "value": 6 } } ] } }, { "key": "b827ebb95199", "doc_count": 70, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 42, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:11:00.000+02:00", "key": 1483171860000, "doc_count": 497, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 271, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 48 }, "avg_ack_pkts_sent": { "value": 9.142857142857142 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 194, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 12, "buckets": [ { "key": "192.168.101.121", "doc_count": 10, "max_ack_pkts_sent": { "value": 12 }, "avg_ack_pkts_sent": { "value": 4.8 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.104", "doc_count": 7, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 4.714285714285714 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 6, "max_ack_pkts_sent": { "value": 14 }, "avg_ack_pkts_sent": { "value": 6.333333333333333 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.131", "doc_count": 6, "max_ack_pkts_sent": { "value": 23 }, "avg_ack_pkts_sent": { "value": 11 }, "min_ack_pkts_sent": { "value": 3 } }, { "key": "192.168.101.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 84 }, "avg_ack_pkts_sent": { "value": 33.666666666666664 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "b827ebb95199", "doc_count": 17, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 15, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:11:30.000+02:00", "key": 1483171890000, "doc_count": 853, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 513, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 12, "buckets": [ { "key": "192.168.101.121", "doc_count": 19, "max_ack_pkts_sent": { "value": 47 }, "avg_ack_pkts_sent": { "value": 10.789473684210526 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.132", "doc_count": 12, "max_ack_pkts_sent": { "value": 121 }, "avg_ack_pkts_sent": { "value": 25.75 }, "min_ack_pkts_sent": { "value": 7 } }, { "key": "192.168.101.104", "doc_count": 9, "max_ack_pkts_sent": { "value": 20 }, "avg_ack_pkts_sent": { "value": 7 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 67 }, "avg_ack_pkts_sent": { "value": 12 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.131", "doc_count": 7, "max_ack_pkts_sent": { "value": 25 }, "avg_ack_pkts_sent": { "value": 8.857142857142858 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e0634ff8", "doc_count": 236, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 7.666666666666667 }, "min_ack_pkts_sent": { "value": 7 } } ] } }, { "key": "b827ebdd0999", "doc_count": 53, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebb95199", "doc_count": 51, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:12:00.000+02:00", "key": 1483171920000, "doc_count": 688, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 334, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 5, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 1.6 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 2, "max_ack_pkts_sent": { "value": 175 }, "avg_ack_pkts_sent": { "value": 88 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 300, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 10, "buckets": [ { "key": "192.168.101.121", "doc_count": 30, "max_ack_pkts_sent": { "value": 35 }, "avg_ack_pkts_sent": { "value": 12.9 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.104", "doc_count": 8, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 3.5 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.132", "doc_count": 4, "max_ack_pkts_sent": { "value": 11 }, "avg_ack_pkts_sent": { "value": 5.75 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 125 }, "avg_ack_pkts_sent": { "value": 47.333333333333336 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.112", "doc_count": 2, "max_ack_pkts_sent": { "value": 5 }, "avg_ack_pkts_sent": { "value": 3.5 }, "min_ack_pkts_sent": { "value": 2 } } ] } }, { "key": "b827ebb95199", "doc_count": 36, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 18, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:12:30.000+02:00", "key": 1483171950000, "doc_count": 672, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 388, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 15, "buckets": [ { "key": "192.168.101.131", "doc_count": 21, "max_ack_pkts_sent": { "value": 20 }, "avg_ack_pkts_sent": { "value": 8.523809523809524 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.121", "doc_count": 11, "max_ack_pkts_sent": { "value": 31 }, "avg_ack_pkts_sent": { "value": 5.2727272727272725 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.104", "doc_count": 9, "max_ack_pkts_sent": { "value": 10 }, "avg_ack_pkts_sent": { "value": 4.222222222222222 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 6, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 2.8333333333333335 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.125", "doc_count": 6, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e0634ff8", "doc_count": 200, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 119 }, "avg_ack_pkts_sent": { "value": 42.666666666666664 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 8 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "b827ebb95199", "doc_count": 45, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 39, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:13:00.000+02:00", "key": 1483171980000, "doc_count": 680, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 430, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 13, "buckets": [ { "key": "192.168.101.104", "doc_count": 34, "max_ack_pkts_sent": { "value": 25 }, "avg_ack_pkts_sent": { "value": 8.441176470588236 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.132", "doc_count": 10, "max_ack_pkts_sent": { "value": 27 }, "avg_ack_pkts_sent": { "value": 11.9 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.121", "doc_count": 7, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 3, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 2, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 8.5 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "0060e0634ff8", "doc_count": 196, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 164 }, "avg_ack_pkts_sent": { "value": 25.857142857142858 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "b827ebb95199", "doc_count": 33, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 21, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:13:30.000+02:00", "key": 1483172010000, "doc_count": 450, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 258, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 10, "buckets": [ { "key": "192.168.101.104", "doc_count": 9, "max_ack_pkts_sent": { "value": 13 }, "avg_ack_pkts_sent": { "value": 3.888888888888889 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 8, "max_ack_pkts_sent": { "value": 156 }, "avg_ack_pkts_sent": { "value": 22.25 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.132", "doc_count": 8, "max_ack_pkts_sent": { "value": 1925 }, "avg_ack_pkts_sent": { "value": 268.875 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.121", "doc_count": 3, "max_ack_pkts_sent": { "value": 22 }, "avg_ack_pkts_sent": { "value": 8 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 3, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 1.3333333333333333 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e0634ff8", "doc_count": 121, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 4, "max_ack_pkts_sent": { "value": 36 }, "avg_ack_pkts_sent": { "value": 14.5 }, "min_ack_pkts_sent": { "value": 6 } } ] } }, { "key": "b827ebb95199", "doc_count": 38, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 33, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:14:00.000+02:00", "key": 1483172040000, "doc_count": 525, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 386, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 6, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 2.8333333333333335 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 2, "max_ack_pkts_sent": { "value": 52 }, "avg_ack_pkts_sent": { "value": 26.5 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 99, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 7, "buckets": [ { "key": "192.168.101.104", "doc_count": 16, "max_ack_pkts_sent": { "value": 2327 }, "avg_ack_pkts_sent": { "value": 325.1875 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 4, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 2.75 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 172 }, "avg_ack_pkts_sent": { "value": 63 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.145", "doc_count": 2, "max_ack_pkts_sent": { "value": 0 }, "avg_ack_pkts_sent": { "value": 0 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.40.10", "doc_count": 2, "max_ack_pkts_sent": { "value": 23 }, "avg_ack_pkts_sent": { "value": 16 }, "min_ack_pkts_sent": { "value": 9 } } ] } }, { "key": "b827ebb95199", "doc_count": 22, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 18, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:14:30.000+02:00", "key": 1483172070000, "doc_count": 518, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 250, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 1, "buckets": [ { "key": "192.168.101.121", "doc_count": 14, "max_ack_pkts_sent": { "value": 74 }, "avg_ack_pkts_sent": { "value": 16.928571428571427 }, "min_ack_pkts_sent": { "value": 5 } }, { "key": "192.168.101.104", "doc_count": 11, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 3.090909090909091 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 8, "max_ack_pkts_sent": { "value": 71 }, "avg_ack_pkts_sent": { "value": 11.75 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.112", "doc_count": 1, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 2 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.125", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e0634ff8", "doc_count": 168, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 83 }, "avg_ack_pkts_sent": { "value": 33 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "b827ebb95199", "doc_count": 62, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 38, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:15:00.000+02:00", "key": 1483172100000, "doc_count": 398, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 209, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 6, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 2.6666666666666665 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 140, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 6, "buckets": [ { "key": "192.168.101.104", "doc_count": 17, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 2.2941176470588234 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 3, "max_ack_pkts_sent": { "value": 3 }, "avg_ack_pkts_sent": { "value": 2 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 2, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 8.5 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "54.230.197.253", "doc_count": 2, "max_ack_pkts_sent": { "value": 3 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 3 } }, { "key": "192.168.101.120", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "b827ebb95199", "doc_count": 30, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 19, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:15:30.000+02:00", "key": 1483172130000, "doc_count": 487, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 217, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 8, "buckets": [ { "key": "192.168.101.104", "doc_count": 17, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 2.176470588235294 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 73 }, "avg_ack_pkts_sent": { "value": 12.857142857142858 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.121", "doc_count": 3, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 4 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.132", "doc_count": 3, "max_ack_pkts_sent": { "value": 24 }, "avg_ack_pkts_sent": { "value": 11.333333333333334 }, "min_ack_pkts_sent": { "value": 4 } }, { "key": "216.58.223.1", "doc_count": 3, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e0634ff8", "doc_count": 179, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 147 }, "avg_ack_pkts_sent": { "value": 54.333333333333336 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "b827ebb95199", "doc_count": 57, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 34, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:16:00.000+02:00", "key": 1483172160000, "doc_count": 511, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 388, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 18 }, "avg_ack_pkts_sent": { "value": 4.857142857142857 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 68, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 1, "buckets": [ { "key": "192.168.101.104", "doc_count": 8, "max_ack_pkts_sent": { "value": 4 }, "avg_ack_pkts_sent": { "value": 1.375 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 138 }, "avg_ack_pkts_sent": { "value": 51.666666666666664 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.120", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.145", "doc_count": 1, "max_ack_pkts_sent": { "value": 0 }, "avg_ack_pkts_sent": { "value": 0 }, "min_ack_pkts_sent": { "value": 0 } } ] } }, { "key": "b827ebb95199", "doc_count": 37, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 18, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:16:30.000+02:00", "key": 1483172190000, "doc_count": 548, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 278, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 5, "max_ack_pkts_sent": { "value": 128 }, "avg_ack_pkts_sent": { "value": 31.6 }, "min_ack_pkts_sent": { "value": 6 } } ] } }, { "key": "0060e063505c", "doc_count": 185, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 4, "buckets": [ { "key": "192.168.101.104", "doc_count": 8, "max_ack_pkts_sent": { "value": 11 }, "avg_ack_pkts_sent": { "value": 4.75 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 5, "max_ack_pkts_sent": { "value": 86 }, "avg_ack_pkts_sent": { "value": 21.6 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.123", "doc_count": 3, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 5.333333333333333 }, "min_ack_pkts_sent": { "value": 5 } }, { "key": "192.168.101.112", "doc_count": 2, "max_ack_pkts_sent": { "value": 11 }, "avg_ack_pkts_sent": { "value": 6.5 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.117", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "b827ebb95199", "doc_count": 47, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 38, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:17:00.000+02:00", "key": 1483172220000, "doc_count": 480, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 327, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 35 }, "avg_ack_pkts_sent": { "value": 7.285714285714286 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 84, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 3, "buckets": [ { "key": "192.168.101.104", "doc_count": 7, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 6, "max_ack_pkts_sent": { "value": 90 }, "avg_ack_pkts_sent": { "value": 17.833333333333332 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.125", "doc_count": 2, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 4.5 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.145", "doc_count": 2, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 0.5 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "216.58.223.14", "doc_count": 2, "max_ack_pkts_sent": { "value": 3 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 3 } } ] } }, { "key": "b827ebdd0999", "doc_count": 39, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebb95199", "doc_count": 30, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:17:30.000+02:00", "key": 1483172250000, "doc_count": 332, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 132, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 1, "buckets": [ { "key": "192.168.101.104", "doc_count": 6, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 3.3333333333333335 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 61 }, "avg_ack_pkts_sent": { "value": 26 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.112", "doc_count": 1, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 2 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.125", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "52.214.66.57", "doc_count": 1, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 9 }, "min_ack_pkts_sent": { "value": 9 } } ] } }, { "key": "0060e0634ff8", "doc_count": 108, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 150 }, "avg_ack_pkts_sent": { "value": 56 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "b827ebb95199", "doc_count": 59, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 33, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:18:00.000+02:00", "key": 1483172280000, "doc_count": 453, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 306, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 25 }, "avg_ack_pkts_sent": { "value": 5 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 2, "max_ack_pkts_sent": { "value": 7 }, "avg_ack_pkts_sent": { "value": 4 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 95, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 2, "buckets": [ { "key": "192.168.101.104", "doc_count": 11, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 27 }, "avg_ack_pkts_sent": { "value": 6.285714285714286 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.125", "doc_count": 2, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 5.5 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.120", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.145", "doc_count": 1, "max_ack_pkts_sent": { "value": 0 }, "avg_ack_pkts_sent": { "value": 0 }, "min_ack_pkts_sent": { "value": 0 } } ] } }, { "key": "b827ebb95199", "doc_count": 34, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 18, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:18:30.000+02:00", "key": 1483172310000, "doc_count": 416, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 169, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 2, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 8.5 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "0060e063505c", "doc_count": 159, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 1, "buckets": [ { "key": "192.168.101.104", "doc_count": 6, "max_ack_pkts_sent": { "value": 12 }, "avg_ack_pkts_sent": { "value": 7.5 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 3, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 1, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 9 }, "min_ack_pkts_sent": { "value": 9 } }, { "key": "192.168.101.112", "doc_count": 1, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 2 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.145", "doc_count": 1, "max_ack_pkts_sent": { "value": 0 }, "avg_ack_pkts_sent": { "value": 0 }, "min_ack_pkts_sent": { "value": 0 } } ] } }, { "key": "b827ebdd0999", "doc_count": 46, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebb95199", "doc_count": 42, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:19:00.000+02:00", "key": 1483172340000, "doc_count": 475, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 235, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 152 }, "avg_ack_pkts_sent": { "value": 24 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 168, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 6, "buckets": [ { "key": "192.168.101.103", "doc_count": 15, "max_ack_pkts_sent": { "value": 82 }, "avg_ack_pkts_sent": { "value": 8 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.104", "doc_count": 9, "max_ack_pkts_sent": { "value": 11 }, "avg_ack_pkts_sent": { "value": 3.4444444444444446 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "216.58.223.1", "doc_count": 5, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 5 }, "min_ack_pkts_sent": { "value": 3 } }, { "key": "192.168.101.132", "doc_count": 4, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 4.75 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "192.168.101.125", "doc_count": 2, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 5 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "b827ebb95199", "doc_count": 38, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 34, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:19:30.000+02:00", "key": 1483172370000, "doc_count": 431, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 184, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 4, "buckets": [ { "key": "192.168.101.104", "doc_count": 7, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 3.4285714285714284 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 4, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.125", "doc_count": 3, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "46.101.215.170", "doc_count": 2, "max_ack_pkts_sent": { "value": 56 }, "avg_ack_pkts_sent": { "value": 32 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.112", "doc_count": 1, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 2 }, "min_ack_pkts_sent": { "value": 2 } } ] } }, { "key": "0060e0634ff8", "doc_count": 171, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 4, "max_ack_pkts_sent": { "value": 114 }, "avg_ack_pkts_sent": { "value": 35 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "b827ebb95199", "doc_count": 38, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 38, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:20:00.000+02:00", "key": 1483172400000, "doc_count": 529, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 352, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 11, "max_ack_pkts_sent": { "value": 122 }, "avg_ack_pkts_sent": { "value": 28.90909090909091 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 2, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 141, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 4, "buckets": [ { "key": "192.168.101.103", "doc_count": 10, "max_ack_pkts_sent": { "value": 90 }, "avg_ack_pkts_sent": { "value": 12.1 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.104", "doc_count": 6, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 3.5 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.132", "doc_count": 5, "max_ack_pkts_sent": { "value": 3 }, "avg_ack_pkts_sent": { "value": 2 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 3, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "46.101.215.170", "doc_count": 2, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "b827ebb95199", "doc_count": 18, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 18, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:20:30.000+02:00", "key": 1483172430000, "doc_count": 706, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 330, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 4, "max_ack_pkts_sent": { "value": 130 }, "avg_ack_pkts_sent": { "value": 41 }, "min_ack_pkts_sent": { "value": 2 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 228 }, "avg_ack_pkts_sent": { "value": 228 }, "min_ack_pkts_sent": { "value": 228 } } ] } }, { "key": "0060e063505c", "doc_count": 255, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 3, "buckets": [ { "key": "192.168.101.132", "doc_count": 10, "max_ack_pkts_sent": { "value": 327 }, "avg_ack_pkts_sent": { "value": 70.3 }, "min_ack_pkts_sent": { "value": 3 } }, { "key": "192.168.101.104", "doc_count": 9, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 3, "max_ack_pkts_sent": { "value": 78 }, "avg_ack_pkts_sent": { "value": 31.666666666666668 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.125", "doc_count": 3, "max_ack_pkts_sent": { "value": 13 }, "avg_ack_pkts_sent": { "value": 7.666666666666667 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.145", "doc_count": 2, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 0 } } ] } }, { "key": "b827ebb95199", "doc_count": 83, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 38, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:21:00.000+02:00", "key": 1483172460000, "doc_count": 547, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e0634ff8", "doc_count": 337, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 4, "max_ack_pkts_sent": { "value": 52 }, "avg_ack_pkts_sent": { "value": 17 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "46.101.215.170", "doc_count": 1, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e063505c", "doc_count": 162, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 2, "buckets": [ { "key": "192.168.101.104", "doc_count": 10, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 2.8 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 7, "max_ack_pkts_sent": { "value": 11 }, "avg_ack_pkts_sent": { "value": 2.5714285714285716 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.132", "doc_count": 7, "max_ack_pkts_sent": { "value": 1967 }, "avg_ack_pkts_sent": { "value": 507 }, "min_ack_pkts_sent": { "value": 5 } }, { "key": "192.168.101.103", "doc_count": 6, "max_ack_pkts_sent": { "value": 9 }, "avg_ack_pkts_sent": { "value": 2.8333333333333335 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.145", "doc_count": 2, "max_ack_pkts_sent": { "value": 5 }, "avg_ack_pkts_sent": { "value": 2.5 }, "min_ack_pkts_sent": { "value": 0 } } ] } }, { "key": "b827ebb95199", "doc_count": 33, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebdd0999", "doc_count": 15, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:21:30.000+02:00", "key": 1483172490000, "doc_count": 448, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 210, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 6, "buckets": [ { "key": "192.168.101.132", "doc_count": 7, "max_ack_pkts_sent": { "value": 1604 }, "avg_ack_pkts_sent": { "value": 237.28571428571428 }, "min_ack_pkts_sent": { "value": 3 } }, { "key": "192.168.101.104", "doc_count": 6, "max_ack_pkts_sent": { "value": 7 }, "avg_ack_pkts_sent": { "value": 3 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.103", "doc_count": 4, "max_ack_pkts_sent": { "value": 18 }, "avg_ack_pkts_sent": { "value": 11.5 }, "min_ack_pkts_sent": { "value": 8 } }, { "key": "192.168.101.123", "doc_count": 3, "max_ack_pkts_sent": { "value": 6 }, "avg_ack_pkts_sent": { "value": 5.333333333333333 }, "min_ack_pkts_sent": { "value": 5 } }, { "key": "192.168.101.125", "doc_count": 2, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } } ] } }, { "key": "0060e0634ff8", "doc_count": 162, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 7, "max_ack_pkts_sent": { "value": 128 }, "avg_ack_pkts_sent": { "value": 21.571428571428573 }, "min_ack_pkts_sent": { "value": 0 } } ] } }, { "key": "b827ebdd0999", "doc_count": 40, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebb95199", "doc_count": 36, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } }, { "key_as_string": "2016-12-31T10:22:00.000+02:00", "key": 1483172520000, "doc_count": 551, "hosts": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "0060e063505c", "doc_count": 264, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 2, "buckets": [ { "key": "192.168.101.103", "doc_count": 8, "max_ack_pkts_sent": { "value": 102 }, "avg_ack_pkts_sent": { "value": 26.375 }, "min_ack_pkts_sent": { "value": 0 } }, { "key": "192.168.101.123", "doc_count": 8, "max_ack_pkts_sent": { "value": 5 }, "avg_ack_pkts_sent": { "value": 5 }, "min_ack_pkts_sent": { "value": 5 } }, { "key": "192.168.101.104", "doc_count": 6, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 1.1666666666666667 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.125", "doc_count": 4, "max_ack_pkts_sent": { "value": 1 }, "avg_ack_pkts_sent": { "value": 1 }, "min_ack_pkts_sent": { "value": 1 } }, { "key": "192.168.101.132", "doc_count": 1, "max_ack_pkts_sent": { "value": 2 }, "avg_ack_pkts_sent": { "value": 2 }, "min_ack_pkts_sent": { "value": 2 } } ] } }, { "key": "0060e0634ff8", "doc_count": 222, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [ { "key": "192.168.85.103", "doc_count": 1, "max_ack_pkts_sent": { "value": 8 }, "avg_ack_pkts_sent": { "value": 8 }, "min_ack_pkts_sent": { "value": 8 } } ] } }, { "key": "b827ebdd0999", "doc_count": 34, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } }, { "key": "b827ebb95199", "doc_count": 31, "sourceAddresses": { "doc_count_error_upper_bound": 0, "sum_other_doc_count": 0, "buckets": [] } } ] } } ] } } }