logstash fields
logstash Module
Fields from the Logstash logs.
logstash.log.module- The module or class where the event originate.
type: keyword
logstash.log.thread- Information about the running thread where the log originate.
type: keyword
logstash.log.thread.text- type: text
logstash.log.log_event- key and value debugging information.
type: object
logstash.log.log_event.action- type: keyword
logstash.log.pipeline_id- The ID of the pipeline.
type: keyword
example: main
logstash.log.message- type: alias
alias to: message
logstash.log.level- type: alias
alias to: log.level
slowlog
logstash.slowlog.module- The module or class where the event originate.
type: keyword
logstash.slowlog.thread- Information about the running thread where the log originate.
type: keyword
logstash.slowlog.thread.text- type: text
logstash.slowlog.event- Raw dump of the original event
type: keyword
logstash.slowlog.event.text- type: text
logstash.slowlog.plugin_name- Name of the plugin
type: keyword
logstash.slowlog.plugin_type- Type of the plugin: Inputs, Filters, Outputs or Codecs.
type: keyword
logstash.slowlog.took_in_millis- Execution time for the plugin in milliseconds.
type: long
logstash.slowlog.plugin_params- String value of the plugin configuration
type: keyword
logstash.slowlog.plugin_params.text- type: text
logstash.slowlog.plugin_params_object- key → value of the configuration used by the plugin.
type: object
logstash.slowlog.level- type: alias
alias to: log.level
logstash.slowlog.took_in_nanos- type: alias
alias to: event.duration