New

The executive guide to generative AI

Read more
About usPartnersSupport|Login

WARNING: Version 6.2 of Packetbeat has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Flow Event fields ICMP fields »
Elastic Docs ›Packetbeat Reference [6.2] ›Exported fields

HTTP fields

edit

HTTP fields

edit

HTTP-specific event fields.

http fields

edit

Information about the HTTP request and response.

request fields

edit

HTTP request

http.request.params

edit

The query parameters or form values. The query parameters are available in the Request-URI and the form values are set in the HTTP body when the content-type is set to x-www-form-urlencoded.

http.request.headers

edit

type: object

A map containing the captured header fields from the request. Which headers to capture is configurable. If headers with the same header name are present in the message, they will be separated by commas.

http.request.body

edit

type: text

The body of the HTTP request.

response fields

edit

HTTP response

http.response.code

edit

example: 404

The HTTP status code.

http.response.phrase

edit

example: Not found.

The HTTP status phrase.

http.response.headers

edit

type: object

A map containing the captured header fields from the response. Which headers to capture is configurable. If headers with the same header name are present in the message, they will be separated by commas.

http.response.body

edit

The body of the HTTP response.

« Flow Event fields ICMP fields »