logstash fields
editlogstash fields
editlogstash Module
logstash fields
editlog fields
editFields from the Logstash logs.
-
logstash.log.message -
type: text
Contains the un-parsed log message
-
logstash.log.level -
type: keyword
The log level of the message, this correspond to Log4j levels.
-
logstash.log.module -
type: keyword
The module or class where the event originate.
-
logstash.log.thread -
type: text
Information about the running thread where the log originate.
-
logstash.log.log_event -
type: object
key and value debugging information.
slowlog fields
editslowlog
-
logstash.slowlog.message -
type: text
Contains the un-parsed log message
-
logstash.slowlog.level -
type: keyword
The log level of the message, this correspond to Log4j levels.
-
logstash.slowlog.module -
type: keyword
The module or class where the event originate.
-
logstash.slowlog.thread -
type: text
Information about the running thread where the log originate.
-
logstash.slowlog.event -
type: text
Raw dump of the original event
-
logstash.slowlog.plugin_name -
type: keyword
Name of the plugin
-
logstash.slowlog.plugin_type -
type: keyword
Type of the plugin: Inputs, Filters, Outputs or Codecs.
-
logstash.slowlog.took_in_millis -
type: long
Execution time for the plugin in milliseconds.
-
logstash.slowlog.took_in_nanos -
type: long
Execution time for the plugin in nanoseconds.
-
logstash.slowlog.plugin_params -
type: text
String value of the plugin configuration
-
logstash.slowlog.plugin_params_object -
type: object
key → value of the configuration used by the plugin.