IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

› ›

Nginx fields

edit

Nginx fields

edit

Module for parsing the Nginx log files.

nginx

edit

Fields from the Nginx log files.

access

edit

Contains fields for the Nginx access logs.

nginx.access.remote_ip_list

An array of remote IP addresses. It is a list because it is common to include, besides the client IP address, IP addresses from headers like X-Forwarded-For. Real source IP is restored to source.ip.

type: array

nginx.access.body_sent.bytes

type: alias

alias to: http.response.body.bytes

nginx.access.user_name

type: alias

alias to: user.name

nginx.access.method

type: alias

alias to: http.request.method

nginx.access.url

type: alias

alias to: url.original

nginx.access.http_version

type: alias

alias to: http.version

nginx.access.response_code

type: alias

alias to: http.response.status_code

nginx.access.referrer

type: alias

alias to: http.request.referrer

nginx.access.agent

type: alias

alias to: user_agent.original

nginx.access.user_agent.device

type: alias

alias to: user_agent.device.name

nginx.access.user_agent.name

type: alias

alias to: user_agent.name

nginx.access.user_agent.os

type: alias

alias to: user_agent.os.full_name

nginx.access.user_agent.os_name

type: alias

alias to: user_agent.os.name

nginx.access.user_agent.original

type: alias

alias to: user_agent.original

nginx.access.geoip.continent_name

type: alias

alias to: source.geo.continent_name

nginx.access.geoip.country_iso_code

type: alias

alias to: source.geo.country_iso_code

nginx.access.geoip.location

type: alias

alias to: source.geo.location

nginx.access.geoip.region_name

type: alias

alias to: source.geo.region_name

nginx.access.geoip.city_name

type: alias

alias to: source.geo.city_name

nginx.access.geoip.region_iso_code

type: alias

alias to: source.geo.region_iso_code

error

edit

Contains fields for the Nginx error logs.

nginx.error.connection_id

Connection identifier.

type: long

nginx.error.level

type: alias

alias to: log.level

nginx.error.pid

type: alias

alias to: process.pid

nginx.error.tid

type: alias

alias to: process.thread.id

nginx.error.message

type: alias

alias to: message

ingress_controller

edit

Contains fields for the Ingress Nginx controller access logs.

nginx.ingress_controller.remote_ip_list

type: array

nginx.ingress_controller.http.request.length

The request length (including request line, header, and request body)

type: long

format: bytes

nginx.ingress_controller.http.request.time

Time elapsed since the first bytes were read from the client

type: double

format: duration

nginx.ingress_controller.upstream.name

The name of the upstream.

type: keyword

nginx.ingress_controller.upstream.alternative_name

The name of the alternative upstream.

type: keyword

nginx.ingress_controller.upstream.response.length

The length of the response obtained from the upstream server

type: long

format: bytes

nginx.ingress_controller.upstream.response.time

The time spent on receiving the response from the upstream server as seconds with millisecond resolution

type: double

format: duration

nginx.ingress_controller.upstream.response.status_code

The status code of the response obtained from the upstream server

type: long

nginx.ingress_controller.http.request.id

The randomly generated ID of the request

type: keyword

nginx.ingress_controller.upstream.ip

The IP address of the upstream server. If several servers were contacted during request processing, their addresses are separated by commas.

type: ip

nginx.ingress_controller.upstream.port

The port of the upstream server.

type: long

nginx.ingress_controller.body_sent.bytes

type: alias

alias to: http.response.body.bytes

nginx.ingress_controller.user_name

type: alias

alias to: user.name

nginx.ingress_controller.method

type: alias

alias to: http.request.method

nginx.ingress_controller.url

type: alias

alias to: url.original

nginx.ingress_controller.http_version

type: alias

alias to: http.version

nginx.ingress_controller.response_code

type: alias

alias to: http.response.status_code

nginx.ingress_controller.referrer

type: alias

alias to: http.request.referrer

nginx.ingress_controller.agent

type: alias

alias to: user_agent.original

nginx.ingress_controller.user_agent.device

type: alias

alias to: user_agent.device.name

nginx.ingress_controller.user_agent.name

type: alias

alias to: user_agent.name

nginx.ingress_controller.user_agent.os

type: alias

alias to: user_agent.os.full_name

nginx.ingress_controller.user_agent.os_name

type: alias

alias to: user_agent.os.name

nginx.ingress_controller.user_agent.original

type: alias

alias to: user_agent.original

nginx.ingress_controller.geoip.continent_name

type: alias

alias to: source.geo.continent_name

nginx.ingress_controller.geoip.country_iso_code

type: alias

alias to: source.geo.country_iso_code

nginx.ingress_controller.geoip.location

type: alias

alias to: source.geo.location

nginx.ingress_controller.geoip.region_name

type: alias

alias to: source.geo.region_name

nginx.ingress_controller.geoip.city_name

type: alias

alias to: source.geo.city_name

nginx.ingress_controller.geoip.region_iso_code

type: alias

alias to: source.geo.region_iso_code

« NetFlow fields Office 365 fields »