You are looking at preliminary documentation for a future release.
Not what you want? See the
current release documentation.
Syslog Fieldsedit
Module for parsing syslog files.
syslog Fieldsedit
Fields from the syslog files.
system Fieldsedit
Contains fields from the syslog system logs.
syslog.system.timestampedit
The timestamp as read from the syslog message.
syslog.system.hostnameedit
The hostname as read from the syslog message.
syslog.system.programedit
The process name as read from the syslog message.
syslog.system.pidedit
The PID of the process that sent the syslog message.
syslog.system.messageedit
The message in the log line.