MongoDB-specific event fields. These fields mirror closely the fields for the MongoDB wire protocol. The higher level fields (for example, query and resource) apply to MongoDB events as well.

mongodb.erroredit

If the MongoDB request has resulted in an error, this field contains the error message returned by the server.

mongodb.fullCollectionNameedit

The full collection name. The full collection name is the concatenation of the database name with the collection name, using a dot (.) for the concatenation. For example, for the database foo and the collection bar, the full collection name is foo.bar.

mongodb.numberToSkipedit

type: long

Sets the number of documents to omit - starting from the first document in the resulting dataset - when returning the result of the query.

mongodb.numberToReturnedit

type: long

The requested maximum number of documents to be returned.

mongodb.numberReturnededit

type: long

The number of documents in the reply.

mongodb.startingFromedit

Where in the cursor this reply is starting.

mongodb.queryedit

A JSON document that represents the query. The query will contain one or more elements, all of which must match for a document to be included in the result set. Possible elements include $query, $orderby, $hint, $explain, and $snapshot.

mongodb.returnFieldsSelectoredit

A JSON document that limits the fields in the returned documents. The returnFieldsSelector contains one or more elements, each of which is the name of a field that should be returned, and the integer value 1.

mongodb.selectoredit

A BSON document that specifies the query for selecting the document to update or delete.

mongodb.updateedit

A BSON document that specifies the update to be performed. For information on specifying updates, see the Update Operations documentation from the MongoDB Manual.

mongodb.cursorIdedit

The cursor identifier returned in the OP_REPLY. This must be the value that was returned from the database.

rpc Fieldsedit

OncRPC specific event fields.

rpc.xidedit

RPC message transaction identifier.

rpc.call_sizeedit

type: long

RPC call size with argument.

rpc.reply_sizeedit

type: long

RPC reply size with argument.

rpc.statusedit

RPC message reply status.

rpc.timeedit

type: long

RPC message processing time.

rpc.time_stredit

RPC message processing time in human readable form.

rpc.auth_flavoredit

RPC authentication flavor.

rpc.cred.uidedit

type: long

RPC caller’s user id, in case of auth-unix.

rpc.cred.gidedit

type: long

RPC caller’s group id, in case of auth-unix.

rpc.cred.gidsedit

RPC caller’s secondary group ids, in case of auth-unix.

rpc.cred.stampedit

type: long

Arbitrary ID which the caller machine may generate.

rpc.cred.machinenameedit

The name of the caller’s machine.