Parsers and Generated Fields
Tag Fields Created by Parser aws-s3serveraccess
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser aws-s3serveraccess
| Vendor Field | CPS Field | Description |
|---|---|---|
| Vendor.remote_ip | client.ip | |
| Vendor.requester | client.user.id | |
| Vendor.operation | event.action | |
| Vendor.total_time | event.duration | |
| Vendor.request_id | event.id | |
| Vendor.referrer | http.request.referrer | |
| Vendor.bytes_sent | http.response.body.bytes | |
| Vendor.http_status | http.response.status_code | |
| Vendor.cipher_suite | tls.cipher |
Tag Fields Created by Parser s3access-space-delimited
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser s3access-space-delimited
| Vendor Field | CPS Field | Description |
|---|---|---|
| Vendor.remote_ip | client.ip | |
| Vendor.requester | client.user.id | |
| Vendor.operation | event.action | |
| Vendor.total_time | event.duration | |
| Vendor.request_id | event.id | |
| Vendor.referrer | http.request.referrer | |
| Vendor.bytes_sent | http.response.body.bytes | |
| Vendor.http_status | http.response.status_code | |
| Vendor.cipher_suite | tls.cipher |