WARNING: Version 5.6 of Packetbeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
MongoDb Fields
editMongoDb Fields
editMongoDB-specific event fields. These fields mirror closely the fields for the MongoDB wire protocol. The higher level fields (for example, query
and resource
) apply to MongoDB events as well.
mongodb.error
editIf the MongoDB request has resulted in an error, this field contains the error message returned by the server.
mongodb.fullCollectionName
editThe full collection name. The full collection name is the concatenation of the database name with the collection name, using a dot (.) for the concatenation. For example, for the database foo and the collection bar, the full collection name is foo.bar.
mongodb.numberToSkip
edittype: long
Sets the number of documents to omit - starting from the first document in the resulting dataset - when returning the result of the query.
mongodb.numberToReturn
edittype: long
The requested maximum number of documents to be returned.
mongodb.numberReturned
edittype: long
The number of documents in the reply.
mongodb.startingFrom
editWhere in the cursor this reply is starting.
mongodb.query
editA JSON document that represents the query. The query will contain one or more elements, all of which must match for a document to be included in the result set. Possible elements include $query, $orderby, $hint, $explain, and $snapshot.
mongodb.returnFieldsSelector
editA JSON document that limits the fields in the returned documents. The returnFieldsSelector contains one or more elements, each of which is the name of a field that should be returned, and the integer value 1.
mongodb.selector
editA BSON document that specifies the query for selecting the document to update or delete.
mongodb.update
editA BSON document that specifies the update to be performed. For information on specifying updates, see the Update Operations documentation from the MongoDB Manual.
mongodb.cursorId
editThe cursor identifier returned in the OP_REPLY. This must be the value that was returned from the database.
rpc Fields
editOncRPC specific event fields.
rpc.xid
editRPC message transaction identifier.
rpc.call_size
edittype: long
RPC call size with argument.
rpc.reply_size
edittype: long
RPC reply size with argument.
rpc.status
editRPC message reply status.
rpc.time
edittype: long
RPC message processing time.
rpc.time_str
editRPC message processing time in human readable form.
rpc.auth_flavor
editRPC authentication flavor.
rpc.cred.uid
edittype: long
RPC caller’s user id, in case of auth-unix.
rpc.cred.gid
edittype: long
RPC caller’s group id, in case of auth-unix.
rpc.cred.gids
editRPC caller’s secondary group ids, in case of auth-unix.
rpc.cred.stamp
edittype: long
Arbitrary ID which the caller machine may generate.
rpc.cred.machinename
editThe name of the caller’s machine.