logstash fields

edit

logstash Module

logstash fields

edit

log fields

edit

Fields from the Logstash logs.

logstash.log.message

type: text

Contains the un-parsed log message

logstash.log.level

type: keyword

The log level of the message, this correspond to Log4j levels.

logstash.log.module

type: keyword

The module or class where the event originate.

logstash.log.thread

type: text

Information about the running thread where the log originate.

logstash.log.log_event

type: object

key and value debugging information.

slowlog fields

edit

slowlog

logstash.slowlog.message

type: text

Contains the un-parsed log message

logstash.slowlog.level

type: keyword

The log level of the message, this correspond to Log4j levels.

logstash.slowlog.module

type: keyword

The module or class where the event originate.

logstash.slowlog.thread

type: text

Information about the running thread where the log originate.

logstash.slowlog.event

type: text

Raw dump of the original event

logstash.slowlog.plugin_name

type: keyword

Name of the plugin

logstash.slowlog.plugin_type

type: keyword

Type of the plugin: Inputs, Filters, Outputs or Codecs.

logstash.slowlog.took_in_millis

type: long

Execution time for the plugin in milliseconds.

logstash.slowlog.took_in_nanos

type: long

Execution time for the plugin in nanoseconds.

logstash.slowlog.plugin_params

type: text

String value of the plugin configuration

logstash.slowlog.plugin_params_object

type: object

key → value of the configuration used by the plugin.