Kubernetes fields

edit

This functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.

Kubernetes metadata added by the kubernetes processor

kubernetes.pod.name

edit

type: keyword

Kubernetes pod name

kubernetes.namespace

edit

type: keyword

Kubernetes namespace

kubernetes.labels

edit

type: object

Kubernetes labels map

kubernetes.annotations

edit

type: object

Kubernetes annotations map

kubernetes.container.name

edit

type: keyword

Kubernetes container name

kubernetes.container.image

edit

type: keyword

Kubernetes container image