User agent fields

Elastic Stack Serverless

The user_agent fields normally come from a browser request.

They often show up in web service logs coming from the parsed user agent string.

Field	Description	Level
user_agent.device.name	Name of the device. type: keyword example: iPhone	extended
user_agent.name	Name of the user agent. type: keyword example: Safari user_agent.name	extended
user_agent.original	Unparsed user_agent string. type: keyword Multi-fields: - user_agent.original.text (type: match_only_text) example: Mozilla/5.0 (iPhone; CPU iPhone OS 12_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1 user_agent.original	extended
user_agent.version	Version of the user agent. type: keyword example: 12.0 user_agent.version	extended