ECS::LogEntry::Tls::Server
Inherits JSON::Serializable < Struct < Value < Object
Constructors
Instance methods
tls.server.certificate
PEM-encoded stand-alone certificate offered by the server. This is usually
mutually-exclusive of server.certificate_chain since this value also exists in
that list.
Level: Extended Type: Keyword Example:
MII...
tls.server.certificate
PEM-encoded stand-alone certificate offered by the server. This is usually
mutually-exclusive of server.certificate_chain since this value also exists in
that list.
Level: Extended Type: Keyword Example:
MII...
tls.server.certificate_chain
Array of PEM-encoded certificates that make up the certificate chain offered by
the server. This is usually mutually-exclusive of server.certificate since that
value should be the first certificate in the chain.
Level: Extended Type: Keyword Example:
["MII...", "MII..."]
tls.server.certificate_chain
Array of PEM-encoded certificates that make up the certificate chain offered by
the server. This is usually mutually-exclusive of server.certificate since that
value should be the first certificate in the chain.
Level: Extended Type: Keyword Example:
["MII...", "MII..."]
Generates an UInt64 hash value for this object.
This method must have the property that a == b implies a.hash == b.hash.
The hash value is used along with == by the Hash class to determine if two objects
reference the same hash key.
Subclasses must not override this method. Instead, they must define hash(hasher),
though usually the macro def_hash can be used to generate this method.
tls.server.issuer
Subject of the issuer of the x.509 certificate presented by the server.
Level: Extended Type: Keyword Example:
CN=MyDomain Root CA, OU=Infrastructure Team, DC=mydomain, DC=com
tls.server.issuer
Subject of the issuer of the x.509 certificate presented by the server.
Level: Extended Type: Keyword Example:
CN=MyDomain Root CA, OU=Infrastructure Team, DC=mydomain, DC=com
tls.server.ja3s
A hash that identifies servers based on how they perform an SSL/TLS handshake.
Level: Extended Type: Keyword Example:
394441ab65754e2207b1e1b457b3641d
tls.server.ja3s
A hash that identifies servers based on how they perform an SSL/TLS handshake.
Level: Extended Type: Keyword Example:
394441ab65754e2207b1e1b457b3641d
tls.server.not_after
Timestamp indicating when server certificate is no longer considered valid.
Level: Extended Type: Date Example:
2021-01-01T00:00:00.000Z
tls.server.not_after
Timestamp indicating when server certificate is no longer considered valid.
Level: Extended Type: Date Example:
2021-01-01T00:00:00.000Z
tls.server.not_before
Timestamp indicating when server certificate is first considered valid.
Level: Extended Type: Date Example:
1970-01-01T00:00:00.000Z
tls.server.not_before
Timestamp indicating when server certificate is first considered valid.
Level: Extended Type: Date Example:
1970-01-01T00:00:00.000Z
tls.server.subject
Subject of the x.509 certificate presented by the server.
Level: Extended Type: Keyword Example:
CN=www.mydomain.com, OU=Infrastructure Team, DC=mydomain, DC=com
tls.server.subject
Subject of the x.509 certificate presented by the server.
Level: Extended Type: Keyword Example:
CN=www.mydomain.com, OU=Infrastructure Team, DC=mydomain, DC=com