Parsers and Generated Fields
Tag Fields Created by Parser haproxy-haproxy
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser haproxy-haproxy
| Vendor Field | CPS Field | Description |
|---|---|---|
| `event.category[]` | Array | None |
| `event.type[]` | Array | None |
| `event.dataset` | Conditionally | Vendor.bind_name, Vendor.status_code, Vendor.client_ip |
| `event.outcome` | Conditionally | Vendor.status_code, Vendor.bind_name |
| `host.name` | Copied | Vendor.server |
| `http.request.method` | Copied | Vendor.method |
| `http.response.bytes` | Copied | Vendor.bytes_read |
| `http.response.status_code` | Copied | Vendor.status_code |
| `log.syslog.appname` | Copied | Vendor.syslog.process_name |
| `log.syslog.hostname` | Copied | Vendor.syslog.host |
| `log.syslog.priority` | Copied | Vendor.syslog.priority |
| `log.syslog.procid` | Copied | Vendor.syslog.pid |
| `process.name` | Copied | Vendor.syslog.process_name (indirect) |
| `process.pid` | Copied | Vendor.syslog.pid (indirect) |
| `source.address` | Copied | Vendor.client_ip (indirect) |
| `source.ip` | Copied | Vendor.client_ip |
| `source.port` | Copied | Vendor.client_port |
| `http.version` | Extracted | Vendor.protocol |
| `@timestamp` | Parsed | None |
| `ecs.version` | Static | None |
| `event.kind` | Static | None |
| `event.module` | Static | None |
| Vendor.http.actconn | Vendor.actconn | |
| Vendor.http.backend_queue | Vendor.backend_queue | |
| Vendor.http.beconn | Vendor.beconn | |
| Vendor.http.bytes_read | Vendor.bytes_read | |
| Vendor.http.feconn | Vendor.feconn | |
| Vendor.http.retries | Vendor.retries | |
| Vendor.http.src_conn | Vendor.src_conn | |
| Vendor.http.srv_queue | Vendor.srv_queue | |
| Vendor.http.termination_state | Vendor.termination_state | |
| Vendor.server | host.name | |
| Vendor.method | http.request.method | |
| Vendor.bytes_read | http.response.bytes | |
| Vendor.status_code | http.response.status_code | |
| Vendor.syslog.process_name | log.syslog.appname | |
| Vendor.syslog.host | log.syslog.hostname | |
| Vendor.syslog.priority | log.syslog.priority | |
| Vendor.syslog.pid | log.syslog.procid | |
| log.syslog.appname | process.name | |
| log.syslog.procid | process.pid | |
| source.ip | source.address | |
| Vendor.client_ip | source.ip | |
| Vendor.client_port | source.port |