Parsers and Generated Fields
Tag Fields Created by Parser aws-s3serveraccess
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser aws-s3serveraccess
Source Field | CPS Field |
---|---|
Vendor.remote_ip | client.ip |
Vendor.requester | client.user.id |
Vendor.operation | event.action |
Vendor.total_time | event.duration |
Vendor.request_id | event.id |
Vendor.referrer | http.request.referrer |
Vendor.bytes_sent | http.response.body.bytes |
Vendor.http_status | http.response.status_code |
Vendor.cipher_suite | tls.cipher |
Tag Fields Created by Parser s3access-space-delimited
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser s3access-space-delimited
Source Field | CPS Field |
---|---|
Vendor.remote_ip | client.ip |
Vendor.requester | client.user.id |
Vendor.operation | event.action |
Vendor.total_time | event.duration |
Vendor.request_id | event.id |
Vendor.referrer | http.request.referrer |
Vendor.bytes_sent | http.response.body.bytes |
Vendor.http_status | http.response.status_code |
Vendor.cipher_suite | tls.cipher |