cluster-logging-exported-fields-rsyslog.adoc

rsyslog exported fields

These are the rsyslog fields exported by the logging system and available for searching from Elasticsearch and Kibana.

The following fields are RFC5424 based metadata.

Parameter	Description
rsyslog.facility	See syslog specification for more information on rsyslog.
rsyslog.protocol-version	This is the rsyslog protocol version.
rsyslog.structured-data	See syslog specification for more information on syslog structured-data.
rsyslog.msgid	This is the syslog msgid field.
rsyslog.appname	If app-name is the same as programname, then only fill top-level field service. If app-name is not equal to programname, this field will hold app-name. See syslog specifications for more information.