Parsers and Generated Fields
Tag Fields Created by Parser aws-vpcflow
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser aws-vpcflow
| Source Field | CPS Field |
|---|---|
| Vendor.dstaddr | destination.address |
| destination.address | destination.ip |
| Vendor.dstport | destination.port |
| Vendor.action | event.action |
| Vendor.end | event.end |
| Vendor.start | event.start |
| Vendor.bytes | network.bytes |
| Vendor.protocol | network.iana_number |
| Vendor.packets | network.packets |
| Vendor.type | network.type |
| Vendor.srcaddr | source.address |
| source.address | source.ip |
| Vendor.srcport | source.port |