1{
2  "took": 28,
3  "timed_out": false,
4  "_shards": {
5    "total": 86,
6    "successful": 86,
7    "failed": 0
8  },
9  "hits": {
10    "total": 18959,
11    "max_score": 0,
12    "hits": []
13  },
14  "aggregations": {
15    "timechart": {
16      "buckets": [
17        {
18          "key_as_string": "2016-12-29T15:18:30.000+02:00",
19          "key": 1483017510000,
20          "doc_count": 101,
21          "hosts": {
22            "doc_count_error_upper_bound": 0,
23            "sum_other_doc_count": 0,
24            "buckets": [
25              {
26                "key": "0060e0634ff8",
27                "doc_count": 49,
28                "avg_pkts_sent_a2b": {
29                  "value": 7.666666666666667
30                }
31              },
32              {
33                "key": "b827ebdd0999",
34                "doc_count": 41,
35                "avg_pkts_sent_a2b": {
36                  "value": null
37                }
38              },
39              {
40                "key": "0060e063505c",
41                "doc_count": 7,
42                "avg_pkts_sent_a2b": {
43                  "value": 3.3333333333333335
44                }
45              },
46              {
47                "key": "b827ebb95199",
48                "doc_count": 4,
49                "avg_pkts_sent_a2b": {
50                  "value": null
51                }
52              }
53            ]
54          }
55        },
56        {
57          "key_as_string": "2016-12-29T15:19:00.000+02:00",
58          "key": 1483017540000,
59          "doc_count": 460,
60          "hosts": {
61            "doc_count_error_upper_bound": 0,
62            "sum_other_doc_count": 0,
63            "buckets": [
64              {
65                "key": "0060e0634ff8",
66                "doc_count": 247,
67                "avg_pkts_sent_a2b": {
68                  "value": 25
69                }
70              },
71              {
72                "key": "0060e063505c",
73                "doc_count": 136,
74                "avg_pkts_sent_a2b": {
75                  "value": 5.615384615384615
76                }
77              },
78              {
79                "key": "b827ebb95199",
80                "doc_count": 58,
81                "avg_pkts_sent_a2b": {
82                  "value": null
83                }
84              },
85              {
86                "key": "b827ebdd0999",
87                "doc_count": 19,
88                "avg_pkts_sent_a2b": {
89                  "value": null
90                }
91              }
92            ]
93          }
94        },
95        {
96          "key_as_string": "2016-12-29T15:19:30.000+02:00",
97          "key": 1483017570000,
98          "doc_count": 302,
99          "hosts": {
100            "doc_count_error_upper_bound": 0,
101            "sum_other_doc_count": 0,
102            "buckets": [
103              {
104                "key": "0060e0634ff8",
105                "doc_count": 180,
106                "avg_pkts_sent_a2b": {
107                  "value": 31.142857142857142
108                }
109              },
110              {
111                "key": "0060e063505c",
112                "doc_count": 52,
113                "avg_pkts_sent_a2b": {
114                  "value": 15
115                }
116              },
117              {
118                "key": "b827ebdd0999",
119                "doc_count": 52,
120                "avg_pkts_sent_a2b": {
121                  "value": null
122                }
123              },
124              {
125                "key": "b827ebb95199",
126                "doc_count": 18,
127                "avg_pkts_sent_a2b": {
128                  "value": null
129                }
130              }
131            ]
132          }
133        },
134        {
135          "key_as_string": "2016-12-29T15:20:00.000+02:00",
136          "key": 1483017600000,
137          "doc_count": 542,
138          "hosts": {
139            "doc_count_error_upper_bound": 0,
140            "sum_other_doc_count": 0,
141            "buckets": [
142              {
143                "key": "0060e0634ff8",
144                "doc_count": 292,
145                "avg_pkts_sent_a2b": {
146                  "value": 15.333333333333334
147                }
148              },
149              {
150                "key": "0060e063505c",
151                "doc_count": 189,
152                "avg_pkts_sent_a2b": {
153                  "value": 7.15
154                }
155              },
156              {
157                "key": "b827ebb95199",
158                "doc_count": 58,
159                "avg_pkts_sent_a2b": {
160                  "value": null
161                }
162              },
163              {
164                "key": "b827ebdd0999",
165                "doc_count": 3,
166                "avg_pkts_sent_a2b": {
167                  "value": null
168                }
169              }
170            ]
171          }
172        },
173        {
174          "key_as_string": "2016-12-29T15:20:30.000+02:00",
175          "key": 1483017630000,
176          "doc_count": 627,
177          "hosts": {
178            "doc_count_error_upper_bound": 0,
179            "sum_other_doc_count": 0,
180            "buckets": [
181              {
182                "key": "0060e0634ff8",
183                "doc_count": 400,
184                "avg_pkts_sent_a2b": {
185                  "value": 8.875
186                }
187              },
188              {
189                "key": "0060e063505c",
190                "doc_count": 140,
191                "avg_pkts_sent_a2b": {
192                  "value": 8.88888888888889
193                }
194              },
195              {
196                "key": "b827ebdd0999",
197                "doc_count": 73,
198                "avg_pkts_sent_a2b": {
199                  "value": null
200                }
201              },
202              {
203                "key": "b827ebb95199",
204                "doc_count": 14,
205                "avg_pkts_sent_a2b": {
206                  "value": null
207                }
208              }
209            ]
210          }
211        },
212        {
213          "key_as_string": "2016-12-29T15:21:00.000+02:00",
214          "key": 1483017660000,
215          "doc_count": 615,
216          "hosts": {
217            "doc_count_error_upper_bound": 0,
218            "sum_other_doc_count": 0,
219            "buckets": [
220              {
221                "key": "0060e0634ff8",
222                "doc_count": 456,
223                "avg_pkts_sent_a2b": {
224                  "value": 21.833333333333332
225                }
226              },
227              {
228                "key": "0060e063505c",
229                "doc_count": 116,
230                "avg_pkts_sent_a2b": {
231                  "value": 1.7272727272727273
232                }
233              },
234              {
235                "key": "b827ebb95199",
236                "doc_count": 39,
237                "avg_pkts_sent_a2b": {
238                  "value": null
239                }
240              },
241              {
242                "key": "b827ebdd0999",
243                "doc_count": 4,
244                "avg_pkts_sent_a2b": {
245                  "value": null
246                }
247              }
248            ]
249          }
250        },
251        {
252          "key_as_string": "2016-12-29T15:21:30.000+02:00",
253          "key": 1483017690000,
254          "doc_count": 401,
255          "hosts": {
256            "doc_count_error_upper_bound": 0,
257            "sum_other_doc_count": 0,
258            "buckets": [
259              {
260                "key": "0060e0634ff8",
261                "doc_count": 211,
262                "avg_pkts_sent_a2b": {
263                  "value": 36.833333333333336
264                }
265              },
266              {
267                "key": "0060e063505c",
268                "doc_count": 103,
269                "avg_pkts_sent_a2b": {
270                  "value": 6.434782608695652
271                }
272              },
273              {
274                "key": "b827ebdd0999",
275                "doc_count": 49,
276                "avg_pkts_sent_a2b": {
277                  "value": null
278                }
279              },
280              {
281                "key": "b827ebb95199",
282                "doc_count": 38,
283                "avg_pkts_sent_a2b": {
284                  "value": null
285                }
286              }
287            ]
288          }
289        },
290        {
291          "key_as_string": "2016-12-29T15:22:00.000+02:00",
292          "key": 1483017720000,
293          "doc_count": 609,
294          "hosts": {
295            "doc_count_error_upper_bound": 0,
296            "sum_other_doc_count": 0,
297            "buckets": [
298              {
299                "key": "0060e0634ff8",
300                "doc_count": 302,
301                "avg_pkts_sent_a2b": {
302                  "value": 46.8
303                }
304              },
305              {
306                "key": "0060e063505c",
307                "doc_count": 261,
308                "avg_pkts_sent_a2b": {
309                  "value": 22.75
310                }
311              },
312              {
313                "key": "b827ebb95199",
314                "doc_count": 43,
315                "avg_pkts_sent_a2b": {
316                  "value": null
317                }
318              },
319              {
320                "key": "b827ebdd0999",
321                "doc_count": 3,
322                "avg_pkts_sent_a2b": {
323                  "value": null
324                }
325              }
326            ]
327          }
328        },
329        {
330          "key_as_string": "2016-12-29T15:22:30.000+02:00",
331          "key": 1483017750000,
332          "doc_count": 552,
333          "hosts": {
334            "doc_count_error_upper_bound": 0,
335            "sum_other_doc_count": 0,
336            "buckets": [
337              {
338                "key": "0060e0634ff8",
339                "doc_count": 314,
340                "avg_pkts_sent_a2b": {
341                  "value": 20.22222222222222
342                }
343              },
344              {
345                "key": "0060e063505c",
346                "doc_count": 156,
347                "avg_pkts_sent_a2b": {
348                  "value": 18.703703703703702
349                }
350              },
351              {
352                "key": "b827ebdd0999",
353                "doc_count": 53,
354                "avg_pkts_sent_a2b": {
355                  "value": null
356                }
357              },
358              {
359                "key": "b827ebb95199",
360                "doc_count": 29,
361                "avg_pkts_sent_a2b": {
362                  "value": null
363                }
364              }
365            ]
366          }
367        },
368        {
369          "key_as_string": "2016-12-29T15:23:00.000+02:00",
370          "key": 1483017780000,
371          "doc_count": 572,
372          "hosts": {
373            "doc_count_error_upper_bound": 0,
374            "sum_other_doc_count": 0,
375            "buckets": [
376              {
377                "key": "0060e0634ff8",
378                "doc_count": 328,
379                "avg_pkts_sent_a2b": {
380                  "value": 26
381                }
382              },
383              {
384                "key": "0060e063505c",
385                "doc_count": 154,
386                "avg_pkts_sent_a2b": {
387                  "value": 13.375
388                }
389              },
390              {
391                "key": "b827ebb95199",
392                "doc_count": 87,
393                "avg_pkts_sent_a2b": {
394                  "value": null
395                }
396              },
397              {
398                "key": "b827ebdd0999",
399                "doc_count": 3,
400                "avg_pkts_sent_a2b": {
401                  "value": null
402                }
403              }
404            ]
405          }
406        },
407        {
408          "key_as_string": "2016-12-29T15:23:30.000+02:00",
409          "key": 1483017810000,
410          "doc_count": 355,
411          "hosts": {
412            "doc_count_error_upper_bound": 0,
413            "sum_other_doc_count": 0,
414            "buckets": [
415              {
416                "key": "0060e0634ff8",
417                "doc_count": 218,
418                "avg_pkts_sent_a2b": {
419                  "value": 11.875
420                }
421              },
422              {
423                "key": "0060e063505c",
424                "doc_count": 71,
425                "avg_pkts_sent_a2b": {
426                  "value": 5.733333333333333
427                }
428              },
429              {
430                "key": "b827ebdd0999",
431                "doc_count": 51,
432                "avg_pkts_sent_a2b": {
433                  "value": null
434                }
435              },
436              {
437                "key": "b827ebb95199",
438                "doc_count": 15,
439                "avg_pkts_sent_a2b": {
440                  "value": null
441                }
442              }
443            ]
444          }
445        },
446        {
447          "key_as_string": "2016-12-29T15:24:00.000+02:00",
448          "key": 1483017840000,
449          "doc_count": 455,
450          "hosts": {
451            "doc_count_error_upper_bound": 0,
452            "sum_other_doc_count": 0,
453            "buckets": [
454              {
455                "key": "0060e0634ff8",
456                "doc_count": 270,
457                "avg_pkts_sent_a2b": {
458                  "value": 9
459                }
460              },
461              {
462                "key": "0060e063505c",
463                "doc_count": 139,
464                "avg_pkts_sent_a2b": {
465                  "value": 5
466                }
467              },
468              {
469                "key": "b827ebb95199",
470                "doc_count": 38,
471                "avg_pkts_sent_a2b": {
472                  "value": null
473                }
474              },
475              {
476                "key": "b827ebdd0999",
477                "doc_count": 8,
478                "avg_pkts_sent_a2b": {
479                  "value": null
480                }
481              }
482            ]
483          }
484        },
485        {
486          "key_as_string": "2016-12-29T15:24:30.000+02:00",
487          "key": 1483017870000,
488          "doc_count": 417,
489          "hosts": {
490            "doc_count_error_upper_bound": 0,
491            "sum_other_doc_count": 0,
492            "buckets": [
493              {
494                "key": "0060e0634ff8",
495                "doc_count": 239,
496                "avg_pkts_sent_a2b": {
497                  "value": 4
498                }
499              },
500              {
501                "key": "0060e063505c",
502                "doc_count": 93,
503                "avg_pkts_sent_a2b": {
504                  "value": 7.2
505                }
506              },
507              {
508                "key": "b827ebdd0999",
509                "doc_count": 49,
510                "avg_pkts_sent_a2b": {
511                  "value": null
512                }
513              },
514              {
515                "key": "b827ebb95199",
516                "doc_count": 36,
517                "avg_pkts_sent_a2b": {
518                  "value": null
519                }
520              }
521            ]
522          }
523        },
524        {
525          "key_as_string": "2016-12-29T15:25:00.000+02:00",
526          "key": 1483017900000,
527          "doc_count": 482,
528          "hosts": {
529            "doc_count_error_upper_bound": 0,
530            "sum_other_doc_count": 0,
531            "buckets": [
532              {
533                "key": "0060e0634ff8",
534                "doc_count": 278,
535                "avg_pkts_sent_a2b": {
536                  "value": 79
537                }
538              },
539              {
540                "key": "0060e063505c",
541                "doc_count": 149,
542                "avg_pkts_sent_a2b": {
543                  "value": 5.071428571428571
544                }
545              },
546              {
547                "key": "b827ebb95199",
548                "doc_count": 48,
549                "avg_pkts_sent_a2b": {
550                  "value": null
551                }
552              },
553              {
554                "key": "b827ebdd0999",
555                "doc_count": 7,
556                "avg_pkts_sent_a2b": {
557                  "value": null
558                }
559              }
560            ]
561          }
562        },
563        {
564          "key_as_string": "2016-12-29T15:25:30.000+02:00",
565          "key": 1483017930000,
566          "doc_count": 1230,
567          "hosts": {
568            "doc_count_error_upper_bound": 0,
569            "sum_other_doc_count": 0,
570            "buckets": [
571              {
572                "key": "0060e063505c",
573                "doc_count": 823,
574                "avg_pkts_sent_a2b": {
575                  "value": 9.39090909090909
576                }
577              },
578              {
579                "key": "0060e0634ff8",
580                "doc_count": 311,
581                "avg_pkts_sent_a2b": {
582                  "value": 14.727272727272727
583                }
584              },
585              {
586                "key": "b827ebdd0999",
587                "doc_count": 65,
588                "avg_pkts_sent_a2b": {
589                  "value": null
590                }
591              },
592              {
593                "key": "b827ebb95199",
594                "doc_count": 31,
595                "avg_pkts_sent_a2b": {
596                  "value": null
597                }
598              }
599            ]
600          }
601        },
602        {
603          "key_as_string": "2016-12-29T15:26:00.000+02:00",
604          "key": 1483017960000,
605          "doc_count": 1246,
606          "hosts": {
607            "doc_count_error_upper_bound": 0,
608            "sum_other_doc_count": 0,
609            "buckets": [
610              {
611                "key": "0060e063505c",
612                "doc_count": 853,
613                "avg_pkts_sent_a2b": {
614                  "value": 6.567226890756302
615                }
616              },
617              {
618                "key": "0060e0634ff8",
619                "doc_count": 325,
620                "avg_pkts_sent_a2b": {
621                  "value": 168
622                }
623              },
624              {
625                "key": "b827ebb95199",
626                "doc_count": 61,
627                "avg_pkts_sent_a2b": {
628                  "value": null
629                }
630              },
631              {
632                "key": "b827ebdd0999",
633                "doc_count": 7,
634                "avg_pkts_sent_a2b": {
635                  "value": null
636                }
637              }
638            ]
639          }
640        },
641        {
642          "key_as_string": "2016-12-29T15:26:30.000+02:00",
643          "key": 1483017990000,
644          "doc_count": 664,
645          "hosts": {
646            "doc_count_error_upper_bound": 0,
647            "sum_other_doc_count": 0,
648            "buckets": [
649              {
650                "key": "0060e063505c",
651                "doc_count": 301,
652                "avg_pkts_sent_a2b": {
653                  "value": 4.888888888888889
654                }
655              },
656              {
657                "key": "0060e0634ff8",
658                "doc_count": 280,
659                "avg_pkts_sent_a2b": {
660                  "value": 5.636363636363637
661                }
662              },
663              {
664                "key": "b827ebdd0999",
665                "doc_count": 68,
666                "avg_pkts_sent_a2b": {
667                  "value": null
668                }
669              },
670              {
671                "key": "b827ebb95199",
672                "doc_count": 15,
673                "avg_pkts_sent_a2b": {
674                  "value": null
675                }
676              }
677            ]
678          }
679        },
680        {
681          "key_as_string": "2016-12-29T15:27:00.000+02:00",
682          "key": 1483018020000,
683          "doc_count": 1608,
684          "hosts": {
685            "doc_count_error_upper_bound": 0,
686            "sum_other_doc_count": 0,
687            "buckets": [
688              {
689                "key": "0060e063505c",
690                "doc_count": 1187,
691                "avg_pkts_sent_a2b": {
692                  "value": 10.123762376237623
693                }
694              },
695              {
696                "key": "0060e0634ff8",
697                "doc_count": 338,
698                "avg_pkts_sent_a2b": {
699                  "value": 46
700                }
701              },
702              {
703                "key": "b827ebb95199",
704                "doc_count": 55,
705                "avg_pkts_sent_a2b": {
706                  "value": null
707                }
708              },
709              {
710                "key": "b827ebdd0999",
711                "doc_count": 28,
712                "avg_pkts_sent_a2b": {
713                  "value": null
714                }
715              }
716            ]
717          }
718        },
719        {
720          "key_as_string": "2016-12-29T15:27:30.000+02:00",
721          "key": 1483018050000,
722          "doc_count": 453,
723          "hosts": {
724            "doc_count_error_upper_bound": 0,
725            "sum_other_doc_count": 0,
726            "buckets": [
727              {
728                "key": "0060e0634ff8",
729                "doc_count": 221,
730                "avg_pkts_sent_a2b": {
731                  "value": 13.307692307692308
732                }
733              },
734              {
735                "key": "0060e063505c",
736                "doc_count": 163,
737                "avg_pkts_sent_a2b": {
738                  "value": 8.080645161290322
739                }
740              },
741              {
742                "key": "b827ebdd0999",
743                "doc_count": 54,
744                "avg_pkts_sent_a2b": {
745                  "value": null
746                }
747              },
748              {
749                "key": "b827ebb95199",
750                "doc_count": 15,
751                "avg_pkts_sent_a2b": {
752                  "value": null
753                }
754              }
755            ]
756          }
757        },
758        {
759          "key_as_string": "2016-12-29T15:28:00.000+02:00",
760          "key": 1483018080000,
761          "doc_count": 1035,
762          "hosts": {
763            "doc_count_error_upper_bound": 0,
764            "sum_other_doc_count": 0,
765            "buckets": [
766              {
767                "key": "0060e063505c",
768                "doc_count": 611,
769                "avg_pkts_sent_a2b": {
770                  "value": 8.405405405405405
771                }
772              },
773              {
774                "key": "0060e0634ff8",
775                "doc_count": 359,
776                "avg_pkts_sent_a2b": {
777                  "value": 6
778                }
779              },
780              {
781                "key": "b827ebb95199",
782                "doc_count": 58,
783                "avg_pkts_sent_a2b": {
784                  "value": null
785                }
786              },
787              {
788                "key": "b827ebdd0999",
789                "doc_count": 7,
790                "avg_pkts_sent_a2b": {
791                  "value": null
792                }
793              }
794            ]
795          }
796        },
797        {
798          "key_as_string": "2016-12-29T15:28:30.000+02:00",
799          "key": 1483018110000,
800          "doc_count": 473,
801          "hosts": {
802            "doc_count_error_upper_bound": 0,
803            "sum_other_doc_count": 0,
804            "buckets": [
805              {
806                "key": "0060e0634ff8",
807                "doc_count": 192,
808                "avg_pkts_sent_a2b": {
809                  "value": 21.272727272727273
810                }
811              },
812              {
813                "key": "0060e063505c",
814                "doc_count": 191,
815                "avg_pkts_sent_a2b": {
816                  "value": 7.215189873417722
817                }
818              },
819              {
820                "key": "b827ebdd0999",
821                "doc_count": 49,
822                "avg_pkts_sent_a2b": {
823                  "value": null
824                }
825              },
826              {
827                "key": "b827ebb95199",
828                "doc_count": 41,
829                "avg_pkts_sent_a2b": {
830                  "value": null
831                }
832              }
833            ]
834          }
835        },
836        {
837          "key_as_string": "2016-12-29T15:29:00.000+02:00",
838          "key": 1483018140000,
839          "doc_count": 684,
840          "hosts": {
841            "doc_count_error_upper_bound": 0,
842            "sum_other_doc_count": 0,
843            "buckets": [
844              {
845                "key": "0060e063505c",
846                "doc_count": 335,
847                "avg_pkts_sent_a2b": {
848                  "value": 5.155172413793103
849                }
850              },
851              {
852                "key": "0060e0634ff8",
853                "doc_count": 282,
854                "avg_pkts_sent_a2b": {
855                  "value": 40
856                }
857              },
858              {
859                "key": "b827ebb95199",
860                "doc_count": 58,
861                "avg_pkts_sent_a2b": {
862                  "value": null
863                }
864              },
865              {
866                "key": "b827ebdd0999",
867                "doc_count": 9,
868                "avg_pkts_sent_a2b": {
869                  "value": null
870                }
871              }
872            ]
873          }
874        },
875        {
876          "key_as_string": "2016-12-29T15:29:30.000+02:00",
877          "key": 1483018170000,
878          "doc_count": 416,
879          "hosts": {
880            "doc_count_error_upper_bound": 0,
881            "sum_other_doc_count": 0,
882            "buckets": [
883              {
884                "key": "0060e0634ff8",
885                "doc_count": 176,
886                "avg_pkts_sent_a2b": {
887                  "value": 18.444444444444443
888                }
889              },
890              {
891                "key": "0060e063505c",
892                "doc_count": 173,
893                "avg_pkts_sent_a2b": {
894                  "value": 6.967741935483871
895                }
896              },
897              {
898                "key": "b827ebdd0999",
899                "doc_count": 50,
900                "avg_pkts_sent_a2b": {
901                  "value": null
902                }
903              },
904              {
905                "key": "b827ebb95199",
906                "doc_count": 17,
907                "avg_pkts_sent_a2b": {
908                  "value": null
909                }
910              }
911            ]
912          }
913        },
914        {
915          "key_as_string": "2016-12-29T15:30:00.000+02:00",
916          "key": 1483018200000,
917          "doc_count": 559,
918          "hosts": {
919            "doc_count_error_upper_bound": 0,
920            "sum_other_doc_count": 0,
921            "buckets": [
922              {
923                "key": "0060e0634ff8",
924                "doc_count": 265,
925                "avg_pkts_sent_a2b": {
926                  "value": 14
927                }
928              },
929              {
930                "key": "0060e063505c",
931                "doc_count": 229,
932                "avg_pkts_sent_a2b": {
933                  "value": 3.625
934                }
935              },
936              {
937                "key": "b827ebb95199",
938                "doc_count": 58,
939                "avg_pkts_sent_a2b": {
940                  "value": null
941                }
942              },
943              {
944                "key": "b827ebdd0999",
945                "doc_count": 7,
946                "avg_pkts_sent_a2b": {
947                  "value": null
948                }
949              }
950            ]
951          }
952        },
953        {
954          "key_as_string": "2016-12-29T15:30:30.000+02:00",
955          "key": 1483018230000,
956          "doc_count": 771,
957          "hosts": {
958            "doc_count_error_upper_bound": 0,
959            "sum_other_doc_count": 0,
960            "buckets": [
961              {
962                "key": "0060e0634ff8",
963                "doc_count": 450,
964                "avg_pkts_sent_a2b": {
965                  "value": 11.6
966                }
967              },
968              {
969                "key": "0060e063505c",
970                "doc_count": 237,
971                "avg_pkts_sent_a2b": {
972                  "value": 16.591836734693878
973                }
974              },
975              {
976                "key": "b827ebdd0999",
977                "doc_count": 67,
978                "avg_pkts_sent_a2b": {
979                  "value": null
980                }
981              },
982              {
983                "key": "b827ebb95199",
984                "doc_count": 17,
985                "avg_pkts_sent_a2b": {
986                  "value": null
987                }
988              }
989            ]
990          }
991        },
992        {
993          "key_as_string": "2016-12-29T15:31:00.000+02:00",
994          "key": 1483018260000,
995          "doc_count": 906,
996          "hosts": {
997            "doc_count_error_upper_bound": 0,
998            "sum_other_doc_count": 0,
999            "buckets": [
1000              {
1001                "key": "0060e0634ff8",
1002                "doc_count": 467,
1003                "avg_pkts_sent_a2b": {
1004                  "value": 69.5
1005                }
1006              },
1007              {
1008                "key": "0060e063505c",
1009                "doc_count": 392,
1010                "avg_pkts_sent_a2b": {
1011                  "value": 12.628571428571428
1012                }
1013              },
1014              {
1015                "key": "b827ebb95199",
1016                "doc_count": 40,
1017                "avg_pkts_sent_a2b": {
1018                  "value": null
1019                }
1020              },
1021              {
1022                "key": "b827ebdd0999",
1023                "doc_count": 7,
1024                "avg_pkts_sent_a2b": {
1025                  "value": null
1026                }
1027              }
1028            ]
1029          }
1030        },
1031        {
1032          "key_as_string": "2016-12-29T15:31:30.000+02:00",
1033          "key": 1483018290000,
1034          "doc_count": 645,
1035          "hosts": {
1036            "doc_count_error_upper_bound": 0,
1037            "sum_other_doc_count": 0,
1038            "buckets": [
1039              {
1040                "key": "0060e0634ff8",
1041                "doc_count": 328,
1042                "avg_pkts_sent_a2b": {
1043                  "value": 12.214285714285714
1044                }
1045              },
1046              {
1047                "key": "0060e063505c",
1048                "doc_count": 253,
1049                "avg_pkts_sent_a2b": {
1050                  "value": 13.967391304347826
1051                }
1052              },
1053              {
1054                "key": "b827ebb95199",
1055                "doc_count": 51,
1056                "avg_pkts_sent_a2b": {
1057                  "value": null
1058                }
1059              },
1060              {
1061                "key": "b827ebdd0999",
1062                "doc_count": 13,
1063                "avg_pkts_sent_a2b": {
1064                  "value": null
1065                }
1066              }
1067            ]
1068          }
1069        },
1070        {
1071          "key_as_string": "2016-12-29T15:32:00.000+02:00",
1072          "key": 1483018320000,
1073          "doc_count": 618,
1074          "hosts": {
1075            "doc_count_error_upper_bound": 0,
1076            "sum_other_doc_count": 0,
1077            "buckets": [
1078              {
1079                "key": "0060e0634ff8",
1080                "doc_count": 326,
1081                "avg_pkts_sent_a2b": {
1082                  "value": 161
1083                }
1084              },
1085              {
1086                "key": "0060e063505c",
1087                "doc_count": 155,
1088                "avg_pkts_sent_a2b": {
1089                  "value": 13.25
1090                }
1091              },
1092              {
1093                "key": "b827ebb95199",
1094                "doc_count": 93,
1095                "avg_pkts_sent_a2b": {
1096                  "value": null
1097                }
1098              },
1099              {
1100                "key": "b827ebdd0999",
1101                "doc_count": 44,
1102                "avg_pkts_sent_a2b": {
1103                  "value": null
1104                }
1105              }
1106            ]
1107          }
1108        },
1109        {
1110          "key_as_string": "2016-12-29T15:32:30.000+02:00",
1111          "key": 1483018350000,
1112          "doc_count": 339,
1113          "hosts": {
1114            "doc_count_error_upper_bound": 0,
1115            "sum_other_doc_count": 0,
1116            "buckets": [
1117              {
1118                "key": "0060e0634ff8",
1119                "doc_count": 246,
1120                "avg_pkts_sent_a2b": {
1121                  "value": 18.75
1122                }
1123              },
1124              {
1125                "key": "0060e063505c",
1126                "doc_count": 42,
1127                "avg_pkts_sent_a2b": {
1128                  "value": 10.545454545454545
1129                }
1130              },
1131              {
1132                "key": "b827ebb95199",
1133                "doc_count": 38,
1134                "avg_pkts_sent_a2b": {
1135                  "value": null
1136                }
1137              },
1138              {
1139                "key": "b827ebdd0999",
1140                "doc_count": 13,
1141                "avg_pkts_sent_a2b": {
1142                  "value": null
1143                }
1144              }
1145            ]
1146          }
1147        },
1148        {
1149          "key_as_string": "2016-12-29T15:33:00.000+02:00",
1150          "key": 1483018380000,
1151          "doc_count": 667,
1152          "hosts": {
1153            "doc_count_error_upper_bound": 0,
1154            "sum_other_doc_count": 0,
1155            "buckets": [
1156              {
1157                "key": "0060e0634ff8",
1158                "doc_count": 424,
1159                "avg_pkts_sent_a2b": {
1160                  "value": 54
1161                }
1162              },
1163              {
1164                "key": "0060e063505c",
1165                "doc_count": 125,
1166                "avg_pkts_sent_a2b": {
1167                  "value": 1.8571428571428572
1168                }
1169              },
1170              {
1171                "key": "b827ebb95199",
1172                "doc_count": 80,
1173                "avg_pkts_sent_a2b": {
1174                  "value": null
1175                }
1176              },
1177              {
1178                "key": "b827ebdd0999",
1179                "doc_count": 38,
1180                "avg_pkts_sent_a2b": {
1181                  "value": null
1182                }
1183              }
1184            ]
1185          }
1186        },
1187        {
1188          "key_as_string": "2016-12-29T15:33:30.000+02:00",
1189          "key": 1483018410000,
1190          "doc_count": 155,
1191          "hosts": {
1192            "doc_count_error_upper_bound": 0,
1193            "sum_other_doc_count": 0,
1194            "buckets": [
1195              {
1196                "key": "0060e0634ff8",
1197                "doc_count": 104,
1198                "avg_pkts_sent_a2b": {
1199                  "value": 154
1200                }
1201              },
1202              {
1203                "key": "b827ebb95199",
1204                "doc_count": 19,
1205                "avg_pkts_sent_a2b": {
1206                  "value": null
1207                }
1208              },
1209              {
1210                "key": "0060e063505c",
1211                "doc_count": 18,
1212                "avg_pkts_sent_a2b": {
1213                  "value": 73
1214                }
1215              },
1216              {
1217                "key": "b827ebdd0999",
1218                "doc_count": 14,
1219                "avg_pkts_sent_a2b": {
1220                  "value": null
1221                }
1222              }
1223            ]
1224          }
1225        }
1226      ]
1227    }
1228  }
1229}