WARNING: Version 6.1 of Filebeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
logstash fieldsedit
logstash Module
logstash fieldsedit
log fieldsedit
Fields from the Logstash logs.
logstash.log.messageedit
type: text
Contains the un-parsed log message
logstash.log.leveledit
type: keyword
The log level of the message, this correspond to Log4j levels.
logstash.log.moduleedit
type: keyword
The module or class where the event originate.
logstash.log.threadedit
type: text
Information about the running thread where the log originate.
logstash.log.log_eventedit
type: object
key and value debugging information.
slowlog fieldsedit
slowlog
logstash.slowlog.messageedit
type: text
Contains the un-parsed log message
logstash.slowlog.leveledit
type: keyword
The log level of the message, this correspond to Log4j levels.
logstash.slowlog.moduleedit
type: keyword
The module or class where the event originate.
logstash.slowlog.threadedit
type: text
Information about the running thread where the log originate.
logstash.slowlog.eventedit
type: text
Raw dump of the original event
logstash.slowlog.plugin_nameedit
type: keyword
Name of the plugin
logstash.slowlog.plugin_typeedit
type: keyword
Type of the plugin: Inputs, Filters, Outputs or Codecs.
logstash.slowlog.took_in_millisedit
type: long
Execution time for the plugin in milliseconds.
logstash.slowlog.took_in_nanosedit
type: long
Execution time for the plugin in nanoseconds.
logstash.slowlog.plugin_paramsedit
type: text
String value of the plugin configuration
logstash.slowlog.plugin_params_objectedit
type: object
key → value of the configuration used by the plugin.