/
fields.yml
86 lines (86 loc) · 2.49 KB
/
fields.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
- name: aws.s3
type: group
fields:
- name: bucket.name
type: keyword
description: |
Name of a S3 bucket.
- name: bucket.arn
type: keyword
description: |
ARN of the S3 bucket that this log retrieved from.
- name: object.key
type: keyword
description: |
Name of the S3 object that this log retrieved from.
- name: metadata
type: flattened
description: |
AWS S3 object metadata values.
- name: aws.apigateway
type: group
fields:
- name: ip_address
type: ip
description: |
The internet address of the requester.
- name: request_id
type: keyword
description: |
An ID for the request. Clients can override this request ID.
- name: http_method
type: keyword
description: |
The HTTP method used. Valid values include: DELETE, GET, HEAD, OPTIONS, PATCH, POST, and PUT.
- name: protocol
type: keyword
description: |
API Gateway APIs can accept HTTP/2 requests, but API Gateway sends requests to backend integrations using HTTP/1.1.
- name: request_time
type: date
description: |
The CLF-formatted request time (dd/MMM/yyyy:HH:mm:ss +-hhmm).
- name: response_length
type: long
description: |
The response payload length in bytes.
- name: route_key
type: keyword
description: |
The selected route key.
- name: status
type: long
description: |
The response status.
- name: caller
type: keyword
description: |
The principal identifier of the caller making the request.
- name: user
type: keyword
description: |
The principal identifier of the user making the request.
- name: resource_path
type: keyword
description: |
The path to your resource.
- name: connection_id
type: keyword
description: |
A unique ID for the connection that can be used to make a callback to the client.
- name: event_type
type: keyword
description: |
The event type: CONNECT, MESSAGE, or DISCONNECT.
- name: api_id
type: keyword
description: |
The identifier API Gateway assigns to your API.
- name: domain_name
type: keyword
description: |
The full domain name used to invoke the API.
- name: stage
type: keyword
description: |-
The deployment stage of the API call (for example, beta or prod).