WARNING: Version 6.1 of Auditbeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Common fieldsedit
Contains common fields available in all event types.
metricset.module
edit
The name of the module that generated the event.
metricset.name
edit
The name of the metricset that generated the event.
metricset.host
edit
Hostname of the machine from which the metricset was collected. This field may not be present when the data was collected locally.
metricset.rtt
edit
type: long
required: True
Event round trip time in microseconds.
metricset.namespace
edit
type: keyword
Namespace of dynamic metricsets.
type
edit
example: metricsets
required: True
The document type. Always set to "metricsets".