@@ -26,116 +26,8 @@ field can be overwritten with the original timezone using the add_fields process
26
26
27
27
Access logs collects the nginx access logs.
28
28
29
- Example events for ` access ` look as following:
29
+ An example event for ` access ` looks as following:
30
30
31
- ``` json
32
- {
33
- "agent" : {
34
- "hostname" : " a73e7856c209" ,
35
- "name" : " a73e7856c209" ,
36
- "id" : " 3987d2b3-b40a-4aa0-99fc-478f9d7079ea" ,
37
- "ephemeral_id" : " 6d41da1c-5f71-4bd4-b326-a8913bfaa884" ,
38
- "type" : " filebeat" ,
39
- "version" : " 7.11.0"
40
- },
41
- "nginx" : {
42
- "access" : {
43
- "remote_ip_list" : [
44
- " 127.0.0.1"
45
- ]
46
- }
47
- },
48
- "log" : {
49
- "file" : {
50
- "path" : " /tmp/service_logs/access.log"
51
- },
52
- "offset" : 0
53
- },
54
- "elastic_agent" : {
55
- "id" : " 5ca3af72-37c3-48b6-92e8-176d154bb66f" ,
56
- "version" : " 7.11.0" ,
57
- "snapshot" : true
58
- },
59
- "source" : {
60
- "address" : " 127.0.0.1" ,
61
- "ip" : " 127.0.0.1"
62
- },
63
- "url" : {
64
- "original" : " /server-status"
65
- },
66
- "input" : {
67
- "type" : " log"
68
- },
69
- "@timestamp" : " 2020-12-03T11:41:57.000Z" ,
70
- "ecs" : {
71
- "version" : " 1.6.0"
72
- },
73
- "related" : {
74
- "ip" : [
75
- " 127.0.0.1"
76
- ]
77
- },
78
- "data_stream" : {
79
- "namespace" : " ep" ,
80
- "type" : " logs" ,
81
- "dataset" : " nginx.access"
82
- },
83
- "host" : {
84
- "hostname" : " a73e7856c209" ,
85
- "os" : {
86
- "kernel" : " 4.9.184-linuxkit" ,
87
- "codename" : " Core" ,
88
- "name" : " CentOS Linux" ,
89
- "family" : " redhat" ,
90
- "version" : " 7 (Core)" ,
91
- "platform" : " centos"
92
- },
93
- "containerized" : true ,
94
- "ip" : [
95
- " 192.168.80.6"
96
- ],
97
- "name" : " a73e7856c209" ,
98
- "id" : " 06c26569966fd125c15acac5d7feffb6" ,
99
- "mac" : [
100
- " 02:42:c0:a8:50:06"
101
- ],
102
- "architecture" : " x86_64"
103
- },
104
- "http" : {
105
- "request" : {
106
- "method" : " get"
107
- },
108
- "response" : {
109
- "status_code" : 200 ,
110
- "body" : {
111
- "bytes" : 97
112
- }
113
- },
114
- "version" : " 1.1"
115
- },
116
- "event" : {
117
- "timezone" : " +00:00" ,
118
- "created" : " 2020-12-03T11:42:17.116Z" ,
119
- "kind" : " event" ,
120
- "category" : [
121
- " web"
122
- ],
123
- "type" : [
124
- " access"
125
- ],
126
- "dataset" : " nginx.access" ,
127
- "outcome" : " success"
128
- },
129
- "user_agent" : {
130
- "original" : " curl/7.64.0" ,
131
- "name" : " curl" ,
132
- "device" : {
133
- "name" : " Other"
134
- },
135
- "version" : " 7.64.0"
136
- }
137
- }
138
- ```
139
31
``` json
140
32
{
141
33
"@timestamp" : " 2023-08-30T21:58:41.000Z" ,
@@ -251,114 +143,6 @@ Example events for `access` look as following:
251
143
}
252
144
}
253
145
```
254
- ``` json
255
- {
256
- "agent" : {
257
- "hostname" : " a73e7856c209" ,
258
- "name" : " a73e7856c209" ,
259
- "id" : " 3987d2b3-b40a-4aa0-99fc-478f9d7079ea" ,
260
- "ephemeral_id" : " 6d41da1c-5f71-4bd4-b326-a8913bfaa884" ,
261
- "type" : " filebeat" ,
262
- "version" : " 7.11.0"
263
- },
264
- "nginx" : {
265
- "access" : {
266
- "remote_ip_list" : [
267
- " 127.0.0.1"
268
- ]
269
- }
270
- },
271
- "log" : {
272
- "file" : {
273
- "path" : " /tmp/service_logs/access.log"
274
- },
275
- "offset" : 0
276
- },
277
- "elastic_agent" : {
278
- "id" : " 5ca3af72-37c3-48b6-92e8-176d154bb66f" ,
279
- "version" : " 7.11.0" ,
280
- "snapshot" : true
281
- },
282
- "source" : {
283
- "address" : " 127.0.0.1" ,
284
- "ip" : " 127.0.0.1"
285
- },
286
- "url" : {
287
- "original" : " /server-status"
288
- },
289
- "input" : {
290
- "type" : " log"
291
- },
292
- "@timestamp" : " 2020-12-03T11:41:57.000Z" ,
293
- "ecs" : {
294
- "version" : " 1.6.0"
295
- },
296
- "related" : {
297
- "ip" : [
298
- " 127.0.0.1"
299
- ]
300
- },
301
- "data_stream" : {
302
- "namespace" : " ep" ,
303
- "type" : " logs" ,
304
- "dataset" : " nginx.access"
305
- },
306
- "host" : {
307
- "hostname" : " a73e7856c209" ,
308
- "os" : {
309
- "kernel" : " 4.9.184-linuxkit" ,
310
- "codename" : " Core" ,
311
- "name" : " CentOS Linux" ,
312
- "family" : " redhat" ,
313
- "version" : " 7 (Core)" ,
314
- "platform" : " centos"
315
- },
316
- "containerized" : true ,
317
- "ip" : [
318
- " 192.168.80.6"
319
- ],
320
- "name" : " a73e7856c209" ,
321
- "id" : " 06c26569966fd125c15acac5d7feffb6" ,
322
- "mac" : [
323
- " 02:42:c0:a8:50:06"
324
- ],
325
- "architecture" : " x86_64"
326
- },
327
- "http" : {
328
- "request" : {
329
- "method" : " get"
330
- },
331
- "response" : {
332
- "status_code" : 200 ,
333
- "body" : {
334
- "bytes" : 97
335
- }
336
- },
337
- "version" : " 1.1"
338
- },
339
- "event" : {
340
- "timezone" : " +00:00" ,
341
- "created" : " 2020-12-03T11:42:17.116Z" ,
342
- "kind" : " event" ,
343
- "category" : [
344
- " web"
345
- ],
346
- "type" : [
347
- " access"
348
- ],
349
- "dataset" : " nginx.access" ,
350
- "outcome" : " success"
351
- },
352
- "user_agent" : {
353
- "original" : " curl/7.64.0" ,
354
- "name" : " curl" ,
355
- "device" : {
356
- "name" : " Other"
357
- },
358
- "version" : " 7.64.0"
359
- }
360
- }
361
- ```
362
146
363
147
** Exported fields**
364
148
0 commit comments