IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

« Code Signature Fields Destination Fields »

› ›

Container Fields

edit

Container Fields

edit

Container fields are used for meta information about the specific container that is the source of information.

These fields help correlate data based containers from any runtime.

Container Field Details

edit

Field	Description	Level
container.id	Unique container id. type: keyword	core
container.image.name	Name of the image the container was built on. type: keyword	extended
container.image.tag	Container image tags. type: keyword Note: this field should contain an array of values.	extended
container.labels	Image labels. type: object	extended
container.name	Container name. type: keyword	extended
container.runtime	Runtime managing this container. type: keyword example: `docker`	extended

« Code Signature Fields Destination Fields »