Parsers and Generated Fields

Tag Fields Created by Parser cisco-ios
  • #Cps.version

  • #Vendor

  • #ecs.version

  • #event.dataset

  • #event.kind

  • #event.module

  • #event.outcome

  • #observer.type

Fields Identified by Parser cisco-ios
Vendor FieldCPS FieldDescription
destination.addressdestination.ip 
Vendor.eventActionevent.action  
Vendor.ios.message_countevent.sequence  
Vendor.ios.sequenceevent.sequence  
source.packetsnetwork.packets 
source.addresssource.ip 
user.namesource.user.name 
Tag Fields Created by Parser syslog-utc
  • #Cps.version

  • #Vendor

  • #ecs.version

  • #event.dataset

  • #event.kind

  • #event.module

  • #event.outcome

  • #observer.type

Fields Identified by Parser syslog-utc
Vendor FieldCPS FieldDescription
1.0.0Cps.version 
destination.addressdestination.ip 
Vendor.ios.message_count;event.sequence 
Vendor.ios.sequence;event.sequence 
source.packetsnetwork.packets 
source.addresssource.ip 
user.namesource.user.name