Kibana fields
Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability This functionality is generally available and ready for production usage. Serverless interfaces and procedures might differ from classic Elastic Stack deployments. The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Serverless
Generally available
Stack
Generally available
kibana Module
service.node.roles- type: keyword
Module for parsing Kibana logs.
kibana.session_id-
The ID of the user session associated with this event. Each login attempt results in a unique session id.
type: keyword
example: 123e4567-e89b-12d3-a456-426614174000
kibana.space_id-
The id of the space associated with this event.
type: keyword
example: default
kibana.saved_object.type-
The type of the saved object associated with this event.
type: keyword
example: dashboard
kibana.saved_object.id-
The id of the saved object associated with this event.
type: keyword
example: 6295bdd0-0a0e-11e7-825f-6748cda7d858
kibana.saved_object.name-
The name of the saved object associated with this event.
type: keyword
example: my-saved-object
kibana.add_to_spaces-
The set of space ids that a saved object was shared to.
type: keyword
example: ['default', 'marketing']
kibana.delete_from_spaces-
The set of space ids that a saved object was removed from.
type: keyword
example: ['default', 'marketing']
kibana.authentication_provider-
The authentication provider associated with a login event.
type: keyword
example: basic1
kibana.authentication_type-
The authentication provider type associated with a login event.
type: keyword
example: basic
kibana.authentication_realm-
The Elasticsearch authentication realm name which fulfilled a login event.
type: keyword
example: native
kibana.lookup_realm-
The Elasticsearch lookup realm which fulfilled a login event.
type: keyword
example: native
Kibana log lines.
kibana.log.tags-
Kibana logging tags.
type: keyword
kibana.log.state-
Current state of Kibana.
type: keyword
kibana.log.meta- type: object
kibana.log.meta.req.headers- type: flattened
kibana.log.meta.res.headers-
type: flattened