IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

« Log file content fields mongodb fields »

› ›

logstash fields

edit

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

logstash fields

edit

logstash Module

logstash fields

edit

log fields

edit

Fields from the Logstash logs.

logstash.log.module

type: keyword

The module or class where the event originate.

logstash.log.thread

type: keyword

Information about the running thread where the log originate.

logstash.log.thread.text

type: text

logstash.log.log_event

type: object

key and value debugging information.

logstash.log.message

type: alias

alias to: message

logstash.log.level

type: alias

alias to: log.level

slowlog fields

edit

slowlog

logstash.slowlog.module

type: keyword

The module or class where the event originate.

logstash.slowlog.thread

type: keyword

Information about the running thread where the log originate.

logstash.slowlog.thread.text

type: text

logstash.slowlog.event

type: keyword

Raw dump of the original event

logstash.slowlog.event.text

type: text

logstash.slowlog.plugin_name

type: keyword

Name of the plugin

logstash.slowlog.plugin_type

type: keyword

Type of the plugin: Inputs, Filters, Outputs or Codecs.

logstash.slowlog.took_in_millis

type: long

Execution time for the plugin in milliseconds.

logstash.slowlog.plugin_params

type: keyword

String value of the plugin configuration

logstash.slowlog.plugin_params.text

type: text

logstash.slowlog.plugin_params_object

type: object

key → value of the configuration used by the plugin.

logstash.slowlog.level

type: alias

alias to: log.level

logstash.slowlog.took_in_nanos

type: alias

alias to: event.duration

« Log file content fields mongodb fields »