This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Reference Logs app fields »
Elastic Docs ›Elastic Observability [8.16] ›Reference

Fields reference

edit

Fields reference

edit

This section lists Elastic Common Schema (ECS) fields the Logs and Infrastructure apps use to display data.

ECS is an open source specification that defines a standard set of fields to use when storing event data in Elasticsearch, such as logs and metrics.

Beat modules (for example, Filebeat modules) are ECS-compliant, so manual field mapping is not required, and all data is populated automatically in the Logs and Infrastructure apps. If you cannot use Beats, map your data to ECS fields (see how to map data to ECS). You can also try using the experimental ECS Mapper tool.

This reference covers:

« Reference Logs app fields »