Parsers and Generated Fields

Tag Fields Created by Parser haproxy
  • #Cps.version

  • #Vendor

  • #ecs.version

  • #event.dataset

  • #event.kind

  • #event.module

  • #event.outcome

  • #observer.type

Fields Identified by Parser haproxy
Source FieldCPS Field
Vendor.http.actconnVendor.actconn
Vendor.http.backend_queueVendor.backend_queue
Vendor.http.beconnVendor.beconn
Vendor.http.bytes_readVendor.bytes_read
Vendor.http.feconnVendor.feconn
Vendor.http.retriesVendor.retries
Vendor.http.src_connVendor.src_conn
Vendor.http.srv_queueVendor.srv_queue
Vendor.http.termination_stateVendor.termination_state
Vendor.methodhttp.request.method
Vendor.bytes_readhttp.response.bytes
Vendor.status_codehttp.response.status_code
source.ipsource.address
Vendor.client_ipsource.ip
Tag Fields Created by Parser haproxy-syslog
  • #Cps.version

  • #Vendor

  • #ecs.version

  • #event.dataset

  • #event.kind

  • #event.module

  • #event.outcome

  • #observer.type

Fields Identified by Parser haproxy-syslog
Source FieldCPS Field
Vendor.http.actconnVendor.actconn
Vendor.http.backend_queueVendor.backend_queue
Vendor.http.beconnVendor.beconn
Vendor.http.bytes_readVendor.bytes_read
Vendor.http.feconnVendor.feconn
Vendor.http.retriesVendor.retries
Vendor.http.src_connVendor.src_conn
Vendor.http.srv_queueVendor.srv_queue
Vendor.http.termination_stateVendor.termination_state
Vendor.methodhttp.request.method
Vendor.bytes_readhttp.response.bytes
Vendor.status_codehttp.response.status_code
Vendor.client_ipsource.address
Vendor.client_ipsource.ip