ECS::LogEntry::Log::Syslog::Severity
Inherits JSON::Serializable < Struct < Value < Object
Constructors
Instance methods
log.syslog.severity.code
The Syslog numeric severity of the log event, if available.
If the event source publishing via Syslog provides a different numeric severity
value (e.g. firewall, IDS), your source's numeric severity should go to
event.severity. If the event source does not specify a distinct severity, you
can optionally copy the Syslog severity to event.severity.
Level: Extended Type: Long Example:
3
log.syslog.severity.code
The Syslog numeric severity of the log event, if available.
If the event source publishing via Syslog provides a different numeric severity
value (e.g. firewall, IDS), your source's numeric severity should go to
event.severity. If the event source does not specify a distinct severity, you
can optionally copy the Syslog severity to event.severity.
Level: Extended Type: Long Example:
3
log.syslog.severity.name
The Syslog numeric severity of the log event, if available.
If the event source publishing via Syslog provides a different severity value
(e.g. firewall, IDS), your source's text severity should go to log.level. If
the event source does not specify a distinct severity, you can optionally copy
the Syslog severity to log.level.
Level: Extended Type: Keyword Example:
Error
log.syslog.severity.name
The Syslog numeric severity of the log event, if available.
If the event source publishing via Syslog provides a different severity value
(e.g. firewall, IDS), your source's text severity should go to log.level. If
the event source does not specify a distinct severity, you can optionally copy
the Syslog severity to log.level.
Level: Extended Type: Keyword Example:
Error