Skip to content

Commit

Permalink
Add response fields to Kibana module based on ECS
Browse files Browse the repository at this point in the history
This is based on the ECS http fields: https://github.com/elastic/ecs#http
  • Loading branch information
ruflin committed Jul 5, 2018
1 parent 0ece14d commit faf16a5
Show file tree
Hide file tree
Showing 5 changed files with 74 additions and 4 deletions.
17 changes: 17 additions & 0 deletions filebeat/_meta/fields.common.yml
Original file line number Diff line number Diff line change
Expand Up @@ -114,3 +114,20 @@
log events this is when the log line was read by Filebeat. In comparison
@timestamp is the processed timestamp from the log line. If both are identical
only @timestamp should be used.
- name: http.response.status_code
type: long
description: >
HTTP response status_code.
example: 404

- name: http.response.elapsed_time
type: long
description: >
Elapsed time between request and response in milli seconds.
- name: http.response.content_length
type: long
description: >
Content length of the HTTP response body.
32 changes: 32 additions & 0 deletions filebeat/docs/fields.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -2551,6 +2551,38 @@ type: date
event.created contains the date on which the event was created. In case of log events this is when the log line was read by Filebeat. In comparison @timestamp is the processed timestamp from the log line. If both are identical only @timestamp should be used.
--
*`http.response.status_code`*::
+
--
type: long
example: 404
HTTP response status_code.
--
*`http.response.elapsed_time`*::
+
--
type: long
Elapsed time between request and response in milli seconds.
--
*`http.response.content_length`*::
+
--
type: long
Content length of the HTTP response body.
--
[[exported-fields-logstash]]
Expand Down
Loading

0 comments on commit faf16a5

Please sign in to comment.