From 89405c783f8ac4a56b5af8b1e237a5f969876a8d Mon Sep 17 00:00:00 2001
From: Suyog Rao <suyog@elastic.co>
Date: Thu, 12 Jan 2017 16:55:26 -0800
Subject: [PATCH] [Logstash monitoring] Fix template to match event structure
 (elastic/elasticsearch#4613)

CPU stats were wrongly nested under "load". The correct nesting is os->cpu->load_average

Original commit: elastic/x-pack-elasticsearch@e3dc3765f688646189ed8c2a946f9be8ff01e3ce
---
 .../main/resources/monitoring-logstash.json   | 22 +++++++++++--------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/elasticsearch/src/main/resources/monitoring-logstash.json b/elasticsearch/src/main/resources/monitoring-logstash.json
index 57ebcc5f9b4..3d66840b3dc 100644
--- a/elasticsearch/src/main/resources/monitoring-logstash.json
+++ b/elasticsearch/src/main/resources/monitoring-logstash.json
@@ -158,16 +158,20 @@
             },
             "os": {
               "properties": {
-                "load": {
+                "cpu": {
                   "properties": {
-                    "1m": {
-                      "type": "half_float"
-                    },
-                    "5m": {
-                      "type": "half_float"
-                    },
-                    "15m": {
-                      "type": "half_float"
+                    "load_average": {
+                      "properties": {
+                        "1m": {
+                          "type": "half_float"
+                        },
+                        "5m": {
+                          "type": "half_float"
+                        },
+                        "15m": {
+                          "type": "half_float"
+                        }
+                      }
                     }
                   }
                 }