NOTE: You are looking at documentation for an older release. For the latest information, see the current release documentation.
logstash fields
editlogstash fields
editlogstash Module
logstash fields
editlog fields
editFields from the Logstash logs.
-
logstash.log.message -
type: text
Contains the un-parsed log message
-
logstash.log.level -
type: keyword
The log level of the message, this correspond to Log4j levels.
-
logstash.log.module -
type: keyword
The module or class where the event originate.
-
logstash.log.thread -
type: text
Information about the running thread where the log originate.
-
logstash.log.log_event -
type: object
key and value debugging information.
slowlog fields
editslowlog
-
logstash.slowlog.message -
type: text
Contains the un-parsed log message
-
logstash.slowlog.level -
type: keyword
The log level of the message, this correspond to Log4j levels.
-
logstash.slowlog.module -
type: keyword
The module or class where the event originate.
-
logstash.slowlog.thread -
type: text
Information about the running thread where the log originate.
-
logstash.slowlog.event -
type: text
Raw dump of the original event
-
logstash.slowlog.plugin_name -
type: keyword
Name of the plugin
-
logstash.slowlog.plugin_type -
type: keyword
Type of the plugin: Inputs, Filters, Outputs or Codecs.
-
logstash.slowlog.took_in_millis -
type: long
Execution time for the plugin in milliseconds.
-
logstash.slowlog.took_in_nanos -
type: long
Execution time for the plugin in nanoseconds.
-
logstash.slowlog.plugin_params -
type: text
String value of the plugin configuration
-
logstash.slowlog.plugin_params_object -
type: object
key → value of the configuration used by the plugin.