Activity Log Event GraphQL/Deprecation
Event for deprecation of GraphQL element
| Field Type | Type | Value | Availability | Description |
|---|---|---|---|---|
| @id | Â | Â | Â | A unique identifier for the event. Can be used to refer to and re-find specific events. |
| @ingesttimestamp | Â | Â | Â | The timestamp of when the event was ingested. The value is milliseconds-since-epoch. |
| @rawstring | Â | Â | Â | The original text of the event. As it keeps the original data on ingestion, this field allows you to do free-text searching across all logs and to extract virtual fields in queries. |
| @timestamp | Â | Â | Â | Timestamp in milliseconds since the epoch (1st Jan 1970, 00:00) of the ingested event, e.g. 2022-11-22 09:50:20.100 if the event has an identifiable timestamp. |
| @timestamp.nanos | Â | Â | Â | Extended precision of timestamp below millisecond. E.g. 295000 |
| @timezone | Â | Â | Â | The timezone the event originated in, if known. This is often set when the event's timestamp is parsed. |
| category | Â | Â | Â | Category of the event, such as Alert, Request, IngestFeed, Fdr, Query, Action, and ScheduledSearch |
| field | Â | Â | Â | Name of deprecated field |
| #category | Â | Â | Â | Category of the event |
| #repo | Â | Â | Â | Name of the repo where the event is stored |
| #severity | Â | Â | Â | Severity of the event from original log source |
| message | Â | Â | Â | Message of the alert or event |
| orgId | Â | Â | Â | Organization ID |
| path | Â | Â | Â | Path of event |
| proxy | Â | Â | Â | Was the request made through a proxy |
| severity | Â | Â | Â | Severity of the event |
| subCategory | Â | Â | Â | Subcategory of the event |
| suggestion | Â | Â | Â | Suggestion text for how to resolve the error or warning from the event |
| timestamp | Â | Â | Â | Timestamp in milliseconds of the event |
| user | Â | Â | Â | User who runs the query |
| username | Â | Â | Â | User name |