User agent Fields

edit

The user_agent fields normally come from a browser request.

They often show up in web service logs coming from the parsed user agent string.

User agent Field Details

edit
Field Description Level

user_agent.device.name

Name of the device.

type: keyword

example: iPhone

extended

user_agent.name

Name of the user agent.

type: keyword

example: Safari

extended

user_agent.original

Unparsed user_agent string.

type: keyword

Multi-fields:

  • user_agent.original.text (type: match_only_text)

example: Mozilla/5.0 (iPhone; CPU iPhone OS 12_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1

extended

user_agent.version

Version of the user agent.

type: keyword

example: 12.0

extended

Field Reuse

edit
Field sets that can be nested under User agent
edit
Location Field Set Description

user_agent.os.*

os

OS fields contain information about the operating system.