Parsers and Generated Fields

Tag Fields Created by Parser aws-s3serveraccess
  • #Cps.version

  • #Vendor

  • #ecs.version

  • #event.dataset

  • #event.kind

  • #event.module

  • #event.outcome

  • #observer.type

Fields Identified by Parser aws-s3serveraccess
Source FieldCPS Field
Vendor.remote_ipclient.ip
Vendor.requesterclient.user.id
Vendor.operationevent.action
Vendor.total_timeevent.duration
Vendor.request_idevent.id
Vendor.referrerhttp.request.referrer
Vendor.bytes_senthttp.response.body.bytes
Vendor.http_statushttp.response.status_code
Vendor.cipher_suitetls.cipher
Tag Fields Created by Parser s3access-space-delimited
  • #Cps.version

  • #Vendor

  • #ecs.version

  • #event.dataset

  • #event.kind

  • #event.module

  • #event.outcome

  • #observer.type

Fields Identified by Parser s3access-space-delimited
Source FieldCPS Field
Vendor.remote_ipclient.ip
Vendor.requesterclient.user.id
Vendor.operationevent.action
Vendor.total_timeevent.duration
Vendor.request_idevent.id
Vendor.referrerhttp.request.referrer
Vendor.bytes_senthttp.response.body.bytes
Vendor.http_statushttp.response.status_code
Vendor.cipher_suitetls.cipher