struct

ECS::LogEntry::Log

Inherits JSON::Serializable < Struct < Value < Object

Constructors

new(pull : JSON::PullParser)
Source
new

Initialize all values as nil

Source
new(*, __pull_for_json_serializable pull : JSON::PullParser)
Source

Instance methods

file(value : File)

A chainable setter for file

Source
file
Source
file

Initialize a new File, yield it to the block

Source
file=(file : File | Nil)
Source
level(new_value : String)

A chainable setter for level

Source
level

log.level

Original log level of the log event.

If the source of the event provides a log level or textual severity, this is the one that goes in log.level. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity).

Some examples are warn, err, i, informational.

Level: Core Type: Keyword Example:

error
Source
level=(level : String | Nil)

log.level

Original log level of the log event.

If the source of the event provides a log level or textual severity, this is the one that goes in log.level. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity).

Some examples are warn, err, i, informational.

Level: Core Type: Keyword Example:

error
Source
logger(new_value : String)

A chainable setter for logger

Source
logger

log.logger

The name of the logger inside an application. This is usually the name of the class which initialized the logger, or can be a custom name.

Level: Core Type: Keyword Example:

org.elasticsearch.bootstrap.Bootstrap
Source
logger=(logger : String | Nil)

log.logger

The name of the logger inside an application. This is usually the name of the class which initialized the logger, or can be a custom name.

Level: Core Type: Keyword Example:

org.elasticsearch.bootstrap.Bootstrap
Source
origin(value : Origin)

A chainable setter for origin

Source
origin
Source
origin

Initialize a new Origin, yield it to the block

Source
origin=(origin : Origin | Nil)
Source
original(new_value : String)

A chainable setter for original

Source
original

log.original

This is the original log message and contains the full log message before splitting it up in multiple parts.

In contrast to the message field which can contain an extracted part of the log message, this field contains the original, full log message. It can have already some modifications applied like encoding or new lines removed to clean up the log message.

This field is not indexed and doc_values are disabled so it can't be queried but the value can be retrieved from _source.

Level: Core Type: Keyword Example:

Sep 19 08:26:10 localhost My log
Source
original=(original : String | Nil)

log.original

This is the original log message and contains the full log message before splitting it up in multiple parts.

In contrast to the message field which can contain an extracted part of the log message, this field contains the original, full log message. It can have already some modifications applied like encoding or new lines removed to clean up the log message.

This field is not indexed and doc_values are disabled so it can't be queried but the value can be retrieved from _source.

Level: Core Type: Keyword Example:

Sep 19 08:26:10 localhost My log
Source
syslog(new_value : Hash(String, String))

A chainable setter for syslog

Source
syslog(value : Syslog)

A chainable setter for syslog

Source
syslog

log.syslog

The Syslog metadata of the event, if the event was transmitted via Syslog. Please see RFCs 5424 or 3164.

Level: Extended Type: Object Object Type: Keyword

Source
syslog

Initialize a new Syslog, yield it to the block

Source
syslog=(syslog : Hash(String, String) | Nil)

log.syslog

The Syslog metadata of the event, if the event was transmitted via Syslog. Please see RFCs 5424 or 3164.

Level: Extended Type: Object Object Type: Keyword

Source
syslog=(syslog : Syslog | Nil)
Source

Nested types