Apache fields

edit

Apache Module

apache2

edit

Aliases for backward compatibility with old apache2 fields

apache2.access.remote_ip

type: alias

alias to: source.address

apache2.access.ssl.protocol

type: alias

alias to: apache.access.ssl.protocol

apache2.access.ssl.cipher

type: alias

alias to: apache.access.ssl.cipher

apache2.access.body_sent.bytes

type: alias

alias to: http.response.body.bytes

apache2.access.user_name

type: alias

alias to: user.name

apache2.access.method

type: alias

alias to: http.request.method

apache2.access.url

type: alias

alias to: url.original

apache2.access.http_version

type: alias

alias to: http.version

apache2.access.response_code

type: alias

alias to: http.response.status_code

apache2.access.referrer

type: alias

alias to: http.request.referrer

apache2.access.agent

type: alias

alias to: user_agent.original

apache2.access.user_agent.device

type: alias

alias to: user_agent.device.name

apache2.access.user_agent.name

type: alias

alias to: user_agent.name

apache2.access.user_agent.os

type: alias

alias to: user_agent.os.full_name

apache2.access.user_agent.os_name

type: alias

alias to: user_agent.os.name

apache2.access.user_agent.original

type: alias

alias to: user_agent.original

apache2.access.geoip.continent_name

type: alias

alias to: source.geo.continent_name

apache2.access.geoip.country_iso_code

type: alias

alias to: source.geo.country_iso_code

apache2.access.geoip.location

type: alias

alias to: source.geo.location

apache2.access.geoip.region_name

type: alias

alias to: source.geo.region_name

apache2.access.geoip.city_name

type: alias

alias to: source.geo.city_name

apache2.access.geoip.region_iso_code

type: alias

alias to: source.geo.region_iso_code

apache2.error.level

type: alias

alias to: log.level

apache2.error.message

type: alias

alias to: message

apache2.error.pid

type: alias

alias to: process.pid

apache2.error.tid

type: alias

alias to: process.thread.id

apache2.error.module

type: alias

alias to: apache.error.module

apache

edit

Apache fields.

access

edit

Contains fields for the Apache HTTP Server access logs.

apache.access.ssl.protocol

SSL protocol version.

type: keyword

apache.access.ssl.cipher

SSL cipher name.

type: keyword

error

edit

Fields from the Apache error logs.

apache.error.module

The module producing the logged message.

type: keyword