Parsers and Generated Fields
Tag Fields Created by Parser island
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser island
| Source Field | LogScale Repository Field |
|---|---|
| Vendor.action | event.action |
| Vendor.message.type | event.action |
| Vendor.message.sourceIp | source.ip |
| Vendor.message.publicIp | source.nat.ip |
| Vendor.message.topLevelUrl | url.original |
| Vendor.message.email | user.email |
| Vendor.message.userId | user.id |
| Vendor.message.userName | user.name |
| Vendor.message.entityId | user.target.id |
| Vendor.message.entityName | user.target.name |