Parsers and Generated Fields

Tag Fields Created by Parser aws-s3serveraccess
  • #Cps.version

  • #Vendor

  • #ecs.version

  • #event.dataset

  • #event.kind

  • #event.module

  • #event.outcome

  • #observer.type

Fields Identified by Parser aws-s3serveraccess
Vendor FieldCPS FieldDescription
Vendor.remote_ipclient.ip 
Vendor.remote_ipclient.ip,Client IP address
Vendor.requesterclient.user.idRequester identifier
Vendor.bucketcloud.Storage.bucket_nameS3 bucket name
Vendor.error_codeerror.codeWhen error occurs
Vendor.error_code;error.code 
Vendor.operationevent.actionS3 operation type
Vendor.total_timeevent.durationRequest duration
Vendor.request_idevent.idRequest identifier
Vendor.host_idhost.idHost identifier
Vendor.referrerhttp.request.referrerHTTP referrer
Vendor.bytes_senthttp.response.body.bytesResponse body size
Vendor.http_statushttp.response.status_codeHTTP response code
Vendor.cipher_suitetls.cipherTLS cipher suite
Vendor.tls_versiontls.version,TLS version information
Vendor.request_uriurl.originalOriginal request URI
Vendor.user_agentuser_agent.originalUser agent string