Traefik fields

edit

Module for parsing the Traefik log files.

traefik fields

edit

Fields from the Traefik log files.

access fields

edit

Contains fields for the Traefik access logs.

traefik.access.remote_ip

edit

type: keyword

Client IP address.

traefik.access.user_name

edit

type: keyword

The user name used when basic authentication is used.

traefik.access.method

edit

type: keyword

example: GET

The request HTTP method.

traefik.access.url

edit

type: keyword

The request HTTP URL.

traefik.access.http_version

edit

type: keyword

The HTTP version.

traefik.access.response_code

edit

type: long

The HTTP response code.

traefik.access.body_sent.bytes

edit

type: long

format: bytes

The number of bytes of the server response body.

traefik.access.referrer

edit

type: keyword

The HTTP referrer.

traefik.access.agent

edit

type: text

Contains the un-parsed user agent string. Only present if the user agent Elasticsearch plugin is not available or not used.

user_agent fields

edit

Contains the parsed User agent field. Only present if the user agent Elasticsearch plugin is available and used.

traefik.access.user_agent.device

edit

type: keyword

The name of the physical device.

traefik.access.user_agent.major

edit

type: long

The major version of the user agent.

traefik.access.user_agent.minor

edit

type: long

The minor version of the user agent.

traefik.access.user_agent.patch

edit

type: keyword

The patch version of the user agent.

traefik.access.user_agent.name

edit

type: keyword

example: Chrome

The name of the user agent.

traefik.access.user_agent.os

edit

type: keyword

The name of the operating system.

traefik.access.user_agent.os_major

edit

type: long

The major version of the operating system.

traefik.access.user_agent.os_minor

edit

type: long

The minor version of the operating system.

traefik.access.user_agent.os_name

edit

type: keyword

The name of the operating system.

geoip fields

edit

Contains GeoIP information gathered based on the remote_ip field. Only present if the GeoIP Elasticsearch plugin is available and used.

traefik.access.geoip.continent_name

edit

type: keyword

The name of the continent.

traefik.access.geoip.country_iso_code

edit

type: keyword

Country ISO code.

traefik.access.geoip.location

edit

type: geo_point

The longitude and latitude.

traefik.access.geoip.region_name

edit

type: keyword

The region name.

traefik.access.geoip.city_name

edit

type: keyword

The city name.

traefik.access.request_count

edit

type: long

The number of requests

traefik.access.frontend_name

edit

type: text

The name of the frontend used

traefik.access.backend_url

edit

type: text

The url of the backend where request is forwarded