ECS::LogEntry::Server
Inherits JSON::Serializable < Struct < Value < Object
Constructors
Instance methods
server.address
Some event server addresses are defined ambiguously. The event will sometimes
list an IP, a domain or a unix socket. You should always store the raw address in
the .address field.
Then it should be duplicated to .ip or .domain, depending on which one it
is.
Level: Extended Type: Keyword
server.address
Some event server addresses are defined ambiguously. The event will sometimes
list an IP, a domain or a unix socket. You should always store the raw address in
the .address field.
Then it should be duplicated to .ip or .domain, depending on which one it
is.
Level: Extended Type: Keyword
server.bytes
Bytes sent from the server to the client.
Level: Core Type: Long Example:
184
server.bytes
Bytes sent from the server to the client.
Level: Core Type: Long Example:
184
server.ip
IP address of the server (IPv4 or IPv6).
Level: Core Type: IP
server.packets
Packets sent from the server to the client.
Level: Core Type: Long Example:
12
server.packets
Packets sent from the server to the client.
Level: Core Type: Long Example:
12
server.registered_domain
The highest registered server domain, stripped of the subdomain.
For example, the registered domain for "foo.google.com" is "google.com".
This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk".
Level: Extended Type: Keyword Example:
google.com
server.registered_domain
The highest registered server domain, stripped of the subdomain.
For example, the registered domain for "foo.google.com" is "google.com".
This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk".
Level: Extended Type: Keyword Example:
google.com
server.top_level_domain
The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for google.com is "com".
This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk".
Level: Extended Type: Keyword Example:
co.uk
server.top_level_domain
The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for google.com is "com".
This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk".
Level: Extended Type: Keyword Example:
co.uk