This functionality is experimental and may be changed or removed completely in a
future release. Elastic will take a best effort approach to fix any issues, but
experimental features are not subject to the support SLA of official GA
features.
Host fields
edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.
Host fields
editInfo collected for the host machine.
-
host.name -
type: keyword
Hostname.
-
host.id -
type: keyword
Unique host id.
-
host.architecture -
type: keyword
Host architecture (e.g. x86_64, arm, ppc, mips).
-
host.containerized -
type: boolean
If the host is a container.
-
host.os.platform -
type: keyword
OS platform (e.g. centos, ubuntu, windows).
-
host.os.name -
type: keyword
Operating system name (e.g. "Mac OS X").
-
host.os.build -
type: keyword
OS build information (e.g. "18D109").
-
host.os.version -
type: keyword
OS version.
-
host.os.family -
type: keyword
OS family (e.g. redhat, debian, freebsd, windows).
-
host.ip -
type: ip
List of IP-addresses.
-
host.mac -
type: keyword
List of hardware-addresses, usually MAC-addresses.