Parsers and Generated Fields

Tag Fields Created by Parser haproxy
  • #Cps.version

  • #Vendor

  • #ecs.version

  • #event.dataset

  • #event.kind

  • #event.module

  • #event.outcome

  • #observer.type

Fields Identified by Parser haproxy
Vendor FieldCPS FieldDescription
Vendor.http.actconnVendor.actconn 
Vendor.http.backend_queueVendor.backend_queue 
Vendor.http.beconnVendor.beconn 
Vendor.http.bytes_readVendor.bytes_read 
Vendor.http.feconnVendor.feconn 
Vendor.http.retriesVendor.retries 
Vendor.http.src_connVendor.src_conn 
Vendor.http.srv_queueVendor.srv_queue 
Vendor.http.termination_stateVendor.termination_state 
Vendor.serverhost.nameServer name
Vendor.methodhttp.request.methodHTTP request method
Vendor.bytes_readhttp.response.bytesNumber of bytes read
Vendor.status_codehttp.response.status_codeHTTP response status code
Vendor.syslog.process_namelog.syslog.appnameSyslog application name
Vendor.syslog.hostlog.syslog.hostnameSyslog hostname
Vendor.syslog.prioritylog.syslog.prioritySyslog priority
Vendor.syslog.pidlog.syslog.procidSyslog process ID
Vendor.syslog.process_nameprocess.nameProcess name from syslog
log.syslog.appnameprocess.name 
Vendor.syslog.pidprocess.pidProcess ID from syslog
log.syslog.procidprocess.pid 
Vendor.client_ipsource.addressClient address
source.ipsource.address 
Vendor.client_ipsource.ipClient IP address
Vendor.client_portsource.portClient port number