ECS::LogEntry::File
Inherits JSON::Serializable < Struct < Value < Object
Constructors
Instance methods
file.accessed
Last time the file was accessed.
Note that not all filesystems keep track of access time.
Level: Extended Type: Date
file.accessed
Last time the file was accessed.
Note that not all filesystems keep track of access time.
Level: Extended Type: Date
file.attributes
Array of file attributes.
Attributes names will vary by platform. Here's a non-exhaustive list of values that are expected in this field: archive, compressed, directory, encrypted, execute, hidden, read, readonly, system, write.
Level: Extended Type: Keyword Example:
["readonly", "system"]
file.attributes
Array of file attributes.
Attributes names will vary by platform. Here's a non-exhaustive list of values that are expected in this field: archive, compressed, directory, encrypted, execute, hidden, read, readonly, system, write.
Level: Extended Type: Keyword Example:
["readonly", "system"]
file.created
File creation time.
Note that not all filesystems store the creation time.
Level: Extended Type: Date
file.created
File creation time.
Note that not all filesystems store the creation time.
Level: Extended Type: Date
file.ctime
Last time the file attributes or metadata changed.
Note that changes to the file content will update mtime. This implies ctime
will be adjusted at the same time, since mtime is an attribute of the file.
Level: Extended Type: Date
file.ctime
Last time the file attributes or metadata changed.
Note that changes to the file content will update mtime. This implies ctime
will be adjusted at the same time, since mtime is an attribute of the file.
Level: Extended Type: Date
file.device
Device that is the source of the file.
Level: Extended Type: Keyword Example:
sda
file.device
Device that is the source of the file.
Level: Extended Type: Keyword Example:
sda
file.directory
Directory where the file is located. It should include the drive letter, when appropriate.
Level: Extended Type: Keyword Example:
/home/alice
file.directory
Directory where the file is located. It should include the drive letter, when appropriate.
Level: Extended Type: Keyword Example:
/home/alice
file.drive_letter
Drive letter where the file is located. This field is only relevant on Windows.
The value should be uppercase, and not include the colon.
Level: Extended Type: Keyword Example:
C
file.drive_letter
Drive letter where the file is located. This field is only relevant on Windows.
The value should be uppercase, and not include the colon.
Level: Extended Type: Keyword Example:
C
file.extension
File extension.
Level: Extended Type: Keyword Example:
png
file.gid
Primary group ID (GID) of the file.
Level: Extended Type: Keyword Example:
1001
file.group
Primary group name of the file.
Level: Extended Type: Keyword Example:
alice
Generates an UInt64 hash value for this object.
This method must have the property that a == b implies a.hash == b.hash.
The hash value is used along with == by the Hash class to determine if two objects
reference the same hash key.
Subclasses must not override this method. Instead, they must define hash(hasher),
though usually the macro def_hash can be used to generate this method.
file.inode
Inode representing the file in the filesystem.
Level: Extended Type: Keyword Example:
256383
file.inode
Inode representing the file in the filesystem.
Level: Extended Type: Keyword Example:
256383
file.mime_type
MIME type should identify the format of the file or stream of bytes using https://www.iana.org/assignments/media-types/media-types.xhtml[IANA official types], where possible. When more than one type is applicable, the most specific type should be used.
Level: Extended Type: Keyword
file.mime_type
MIME type should identify the format of the file or stream of bytes using https://www.iana.org/assignments/media-types/media-types.xhtml[IANA official types], where possible. When more than one type is applicable, the most specific type should be used.
Level: Extended Type: Keyword
file.mode
Mode of the file in octal representation.
Level: Extended Type: Keyword Example:
0640
file.mode
Mode of the file in octal representation.
Level: Extended Type: Keyword Example:
0640
file.mtime
Last time the file content was modified.
Level: Extended Type: Date
file.name
Name of the file including the extension, without the directory.
Level: Extended Type: Keyword Example:
example.png
file.name
Name of the file including the extension, without the directory.
Level: Extended Type: Keyword Example:
example.png
file.owner
File owner's username.
Level: Extended Type: Keyword Example:
alice
file.path
Full path to the file, including the file name. It should include the drive letter, when appropriate.
Level: Extended Type: Keyword Example:
/home/alice/example.png
file.path
Full path to the file, including the file name. It should include the drive letter, when appropriate.
Level: Extended Type: Keyword Example:
/home/alice/example.png
file.size
File size in bytes.
Only relevant when file.type is "file".
Level: Extended Type: Long Example:
16384
file.size
File size in bytes.
Only relevant when file.type is "file".
Level: Extended Type: Long Example:
16384
file.target_path
Target path for symlinks.
Level: Extended Type: Keyword
file.type
File type (file, dir, or symlink).
Level: Extended Type: Keyword Example:
file
file.uid
The user ID (UID) or security identifier (SID) of the file owner.
Level: Extended Type: Keyword Example:
1001
file.uid
The user ID (UID) or security identifier (SID) of the file owner.
Level: Extended Type: Keyword Example:
1001