This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.

« User Fields Usage and Examples VLAN Fields »

› ›

User agent Fields

edit

User agent Fields

edit

The user_agent fields normally come from a browser request.

They often show up in web service logs coming from the parsed user agent string.

User agent Field Details

edit

Field	Description	Level
user_agent.device.name	Name of the device. type: keyword example: `iPhone`	extended
user_agent.name	Name of the user agent. type: keyword example: `Safari` user_agent.name	extended
user_agent.original	Unparsed user_agent string. type: keyword Multi-fields: user_agent.original.text (type: match_only_text) example: `Mozilla/5.0 (iPhone; CPU iPhone OS 12_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1` user_agent.original	extended
user_agent.version	Version of the user agent. type: keyword example: `12.0` user_agent.version	extended

Field Reuse

edit

Field sets that can be nested under User agent

edit

Location	Field Set	Description
`user_agent.os.*`	os	OS fields contain information about the operating system.

« User Fields Usage and Examples VLAN Fields »