WARNING: Version 6.2 of Filebeat has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Log file content fields MySQL fields »

› ›

logstash fields

edit

logstash fields

edit

logstash Module

logstash fields

edit

log fields

edit

Fields from the Logstash logs.

`logstash.log.message`

edit

type: text

Contains the un-parsed log message

`logstash.log.level`

edit

type: keyword

The log level of the message, this correspond to Log4j levels.

`logstash.log.module`

edit

type: keyword

The module or class where the event originate.

`logstash.log.thread`

edit

type: text

Information about the running thread where the log originate.

`logstash.log.log_event`

edit

type: object

key and value debugging information.

slowlog fields

edit

slowlog

`logstash.slowlog.message`

edit

type: text

Contains the un-parsed log message

`logstash.slowlog.level`

edit

type: keyword

The log level of the message, this correspond to Log4j levels.

`logstash.slowlog.module`

edit

type: keyword

The module or class where the event originate.

`logstash.slowlog.thread`

edit

type: text

Information about the running thread where the log originate.

`logstash.slowlog.event`

edit

type: text

Raw dump of the original event

`logstash.slowlog.plugin_name`

edit

type: keyword

Name of the plugin

`logstash.slowlog.plugin_type`

edit

type: keyword

Type of the plugin: Inputs, Filters, Outputs or Codecs.

`logstash.slowlog.took_in_millis`

edit

type: long

Execution time for the plugin in milliseconds.

`logstash.slowlog.took_in_nanos`

edit

type: long

Execution time for the plugin in nanoseconds.

`logstash.slowlog.plugin_params`

edit

type: text

String value of the plugin configuration

`logstash.slowlog.plugin_params_object`

edit

type: object

key → value of the configuration used by the plugin.

« Log file content fields MySQL fields »