IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

« Log file content fields mongodb fields »

› ›

logstash fields

edit

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

logstash fields

edit

logstash Module

logstash fields

edit

log fields

edit

Fields from the Logstash logs.

logstash.log.message

type: text

Contains the un-parsed log message

logstash.log.level

type: keyword

The log level of the message, this correspond to Log4j levels.

logstash.log.module

type: keyword

The module or class where the event originate.

logstash.log.thread

type: text

Information about the running thread where the log originate.

logstash.log.log_event

type: object

key and value debugging information.

slowlog fields

edit

slowlog

logstash.slowlog.message

type: text

Contains the un-parsed log message

logstash.slowlog.level

type: keyword

The log level of the message, this correspond to Log4j levels.

logstash.slowlog.module

type: keyword

The module or class where the event originate.

logstash.slowlog.thread

type: text

Information about the running thread where the log originate.

logstash.slowlog.event

type: text

Raw dump of the original event

logstash.slowlog.plugin_name

type: keyword

Name of the plugin

logstash.slowlog.plugin_type

type: keyword

Type of the plugin: Inputs, Filters, Outputs or Codecs.

logstash.slowlog.took_in_millis

type: long

Execution time for the plugin in milliseconds.

logstash.slowlog.took_in_nanos

type: long

Execution time for the plugin in nanoseconds.

logstash.slowlog.plugin_params

type: text

String value of the plugin configuration

logstash.slowlog.plugin_params_object

type: object

key → value of the configuration used by the plugin.

« Log file content fields mongodb fields »