Logstash 字段

Logstash 模块

logstash_stats.timestamp

type: 别名

别名到: @timestamp

logstash_stats.jvm.mem.heap_used_in_bytes

type: 别名

别名到: logstash.node.stats.jvm.mem.heap_used_in_bytes

logstash_stats.jvm.mem.heap_max_in_bytes

type: 别名

别名到: logstash.node.stats.jvm.mem.heap_max_in_bytes

logstash_stats.jvm.uptime_in_millis

type: 别名

别名到: logstash.node.stats.jvm.uptime_in_millis

logstash_stats.events.in

type: 别名

别名到: logstash.node.stats.events.in

logstash_stats.events.out

type: 别名

别名到: logstash.node.stats.events.out

logstash_stats.events.duration_in_millis

type: 别名

别名到: logstash.node.stats.events.duration_in_millis

logstash_stats.logstash.uuid

type: 别名

别名到: logstash.node.stats.logstash.uuid

logstash_stats.logstash.version

type: 别名

别名到: logstash.node.stats.logstash.version

logstash_stats.pipelines

type: 嵌套

logstash_stats.os.cpu.load_average.15m

type: 别名

别名到: logstash.node.stats.os.cpu.load_average.15m

logstash_stats.os.cpu.load_average.1m

type: 别名

别名到: logstash.node.stats.os.cpu.load_average.1m

logstash_stats.os.cpu.load_average.5m

type: 别名

别名到: logstash.node.stats.os.cpu.load_average.5m

logstash_stats.os.cgroup.cpuacct.usage_nanos

type: 别名

别名到: logstash.node.stats.os.cgroup.cpuacct.usage_nanos

logstash_stats.os.cgroup.cpu.cfs_quota_micros

type: 别名

别名到: logstash.node.stats.os.cgroup.cpu.cfs_quota_micros

logstash_stats.os.cgroup.cpu.stat.number_of_elapsed_periods

type: 别名

别名到: logstash.node.stats.os.cgroup.cpu.stat.number_of_elapsed_periods

logstash_stats.os.cgroup.cpu.stat.time_throttled_nanos

type: 别名

别名到: logstash.node.stats.os.cgroup.cpu.stat.time_throttled_nanos

logstash_stats.os.cgroup.cpu.stat.number_of_times_throttled

type: 别名

别名到: logstash.node.stats.os.cgroup.cpu.stat.number_of_times_throttled

logstash_stats.process.cpu.percent

type: 别名

别名到: logstash.node.stats.process.cpu.percent

logstash_stats.queue.events_count

type: 别名

别名到: logstash.node.stats.queue.events_count

logstash_state.pipeline.id

type: 别名

别名到: logstash.node.state.pipeline.id

logstash_state.pipeline.hash

type: 别名

别名到: logstash.node.state.pipeline.hash

logstash.elasticsearch.cluster.id

type: keyword

节点

节点

节点

节点统计指标。

logstash.node.id

type: keyword

logstash.node.state.pipeline.id

type: keyword

logstash.node.state.pipeline.hash

type: keyword

logstash.node.state.pipeline.ephemeral_id

type: keyword

logstash.node.state.pipeline.batch_size

type: long

logstash.node.state.pipeline.workers

type: long

logstash.node.state.pipeline.representation.hash

type: keyword

logstash.node.state.pipeline.representation.type

type: keyword

logstash.node.state.pipeline.representation.version

type: keyword

logstash.node.state.pipeline.representation.graph.edges

type: object

logstash.node.state.pipeline.representation.graph.vertices

type: object

logstash.node.host

主机名

type: 别名

别名到: host.hostname

logstash.node.version

Logstash 版本

type: 别名

别名到: service.version

JVM

JVM 信息

logstash.node.jvm.version

版本

type: keyword

logstash.node.jvm.pid

进程 ID

type: 别名

别名到: process.pid

logstash.node.stats.timestamp

type: date

logstash.node.stats.jvm.uptime_in_millis

type: long

logstash.node.stats.jvm.mem.heap_used_in_bytes

type: long

logstash.node.stats.jvm.mem.heap_max_in_bytes

type: long

事件

事件统计

logstash.node.stats.events.in

传入事件计数器。

type: long

logstash.node.stats.events.out

传出事件计数器。

type: long

logstash.node.stats.events.filtered

过滤事件计数器。

type: long

logstash.node.stats.events.duration_in_millis

type: long

logstash.node.stats.logstash.uuid

type: keyword

logstash.node.stats.logstash.version

type: keyword

logstash.node.stats.os.cpu.load_average.15m

type: half_float

logstash.node.stats.os.cpu.load_average.1m

type: half_float

logstash.node.stats.os.cpu.load_average.5m

type: half_float

logstash.node.stats.os.cgroup.cpuacct.usage_nanos

type: long

logstash.node.stats.os.cgroup.cpu.cfs_quota_micros

type: long

logstash.node.stats.os.cgroup.cpu.stat.number_of_elapsed_periods

type: long

logstash.node.stats.os.cgroup.cpu.stat.time_throttled_nanos

type: long

logstash.node.stats.os.cgroup.cpu.stat.number_of_times_throttled

type: long

logstash.node.stats.process.cpu.percent

type: double

logstash.node.stats.pipelines

type: 嵌套

logstash.node.stats.queue.events_count

type: long