Container Fields

Container fields are used for meta information about the specific container that is the source of information.

These fields help correlate data based containers from any runtime.

Field	Description	Level
container.id	Unique container id. type: keyword	core
container.image.name	Name of the image the container was built on. type: keyword	extended
container.image.tag	Container image tags. type: keyword Note: this field should contain an array of values.	extended
container.labels	Image labels. type: object	extended
container.name	Container name. type: keyword	extended
container.runtime	Runtime managing this container. type: keyword example: `docker`	extended