LogCollector is a datatype for a Fleet search result entry.

Table: LogCollector

ParameterTypeRequiredDefaultDescription
Some arguments may be required, as indicated in the Required column. For some fields, this column indicates that a result will always be returned for this column.
Table last updated: Sep 26, 2024
cfgTestIdstring  The configuration test identifier.
changeChanges  A change to the log collector. See Changes.
configIdstring  Contains the unique identifier of any manually assigned configuration.
configNamestring  Contains the name of any manually assigned configuration.
configurations[LogCollectorConfigInfo]yes The log collector configurations. See LogCollectorConfigInfo.
cpuAverage5Minfloat  CPU Average for five minutes.
debugLoggingLogCollectorDebugLogging  Debugging information on logging. See LogCollectorDebugLoggingStatic.
DiskMax5Minfloat  Disk usage for a maximum of five minutes.
ephemeralTimeoutinteger  The ephemeral timeout in milliseconds.
errors[string]yes Errors returned.
groups[LogCollectorGroup]yes The log collector groups. See LogCollectorGroup.
hostnamestringyes The hostname.
idstring  If the collector is enrolled, this is its unique identifier.
ingestLast24Hlongyes Ingest last twenty-four hours.
ipAddressstring  The IP address.
lastActivitystringyes Last activity recorded
labels[LogCollectorLabel]yes The log collector labels. See LogCollectorLabel.
logSources[LogCollectorLogSource]yes The log sources. See LogCollectorLogSource.
machineIdstringyes The log collector machine identifier.
MemoryMax5Minlong  Maximum memory for five minutes.
statusLogCollectorStatusType  The status of the log collector. See LogCollectorStatusType.
systemstringyes The host system.
timeOfUpdatedatetime  The date and time of update.
usesRemoteUpdatebooleanyes Whether the log collector uses remote updates.
Versionstringyes The version used.
wantedVersionstringyes The wanted version.