logstash fields

edit

logstash Module

logstash fields

edit

log fields

edit

Fields from the Logstash logs.

logstash.log.message

edit

type: text

Contains the un-parsed log message

logstash.log.level

edit

type: keyword

The log level of the message, this correspond to Log4j levels.

logstash.log.module

edit

type: keyword

The module or class where the event originate.

logstash.log.thread

edit

type: text

Information about the running thread where the log originate.

logstash.log.log_event

edit

type: object

key and value debugging information.

slowlog fields

edit

slowlog

logstash.slowlog.message

edit

type: text

Contains the un-parsed log message

logstash.slowlog.level

edit

type: keyword

The log level of the message, this correspond to Log4j levels.

logstash.slowlog.module

edit

type: keyword

The module or class where the event originate.

logstash.slowlog.thread

edit

type: text

Information about the running thread where the log originate.

logstash.slowlog.event

edit

type: text

Raw dump of the original event

logstash.slowlog.plugin_name

edit

type: keyword

Name of the plugin

logstash.slowlog.plugin_type

edit

type: keyword

Type of the plugin: Inputs, Filters, Outputs or Codecs.

logstash.slowlog.took_in_millis

edit

type: long

Execution time for the plugin in milliseconds.

logstash.slowlog.took_in_nanos

edit

type: long

Execution time for the plugin in nanoseconds.

logstash.slowlog.plugin_params

edit

type: text

String value of the plugin configuration

logstash.slowlog.plugin_params_object

edit

type: object

key → value of the configuration used by the plugin.