Linux Events Collection Modeling Rule

Modeling Rule

Linux Events Collection

Details

IDLinux_Events_Collection_ModelingRule
From Version8.15.0
TagsLinux Events Collection Redhat Ubuntu

Schema

linux_linux_raw

Field Type Array?
_log_source_file_name string
_raw_log string
{
  "linux_linux_raw": {
    "_raw_log": {
        "type": "string",
        "is_array": false
    },
    "_log_source_file_name": {
        "type": "string",
        "is_array": false
    }

  }
}