logstash fields

edit

logstash Module

logstash fields

edit

log fields

edit

Fields from the Logstash logs.

logstash.log.module

type: keyword

The module or class where the event originate.

logstash.log.thread

type: keyword

Information about the running thread where the log originate.

logstash.log.thread.text

type: text

logstash.log.log_event

type: object

key and value debugging information.

logstash.log.message

type: alias

alias to: message

logstash.log.level

type: alias

alias to: log.level

slowlog fields

edit

slowlog

logstash.slowlog.module

type: keyword

The module or class where the event originate.

logstash.slowlog.thread

type: keyword

Information about the running thread where the log originate.

logstash.slowlog.thread.text

type: text

logstash.slowlog.event

type: keyword

Raw dump of the original event

logstash.slowlog.event.text

type: text

logstash.slowlog.plugin_name

type: keyword

Name of the plugin

logstash.slowlog.plugin_type

type: keyword

Type of the plugin: Inputs, Filters, Outputs or Codecs.

logstash.slowlog.took_in_millis

type: long

Execution time for the plugin in milliseconds.

logstash.slowlog.plugin_params

type: keyword

String value of the plugin configuration

logstash.slowlog.plugin_params.text

type: text

logstash.slowlog.plugin_params_object

type: object

key → value of the configuration used by the plugin.

logstash.slowlog.level

type: alias

alias to: log.level

logstash.slowlog.took_in_nanos

type: alias

alias to: event.duration