ECS Field Reference
ECS 1.12
Orchestrator
⚠️ Outdated Version: You are viewing ECS version 1.12, which is outdated. View the latest version (9.0)
ECS Version:

Orchestrator

Fields relevant to container orchestrators.

Fields

Field Summary

FieldTypeLevelDescription
orchestrator.api_versionkeywordExtendedAPI version being used to carry out the action
orchestrator.cluster.namekeywordExtendedName of the cluster.
orchestrator.cluster.urlkeywordExtendedURL of the API used to manage the cluster.
orchestrator.cluster.versionkeywordExtendedThe version of the cluster.
orchestrator.namespacekeywordExtendedNamespace in which the action is taking place.
orchestrator.organizationkeywordExtendedOrganization affected by the event (for multi-tenant orchestrator setups).
orchestrator.resource.namekeywordExtendedName of the resource being acted upon.
orchestrator.resource.typekeywordExtendedType of resource being acted upon.
orchestrator.typekeywordExtendedOrchestrator cluster type (e.g. kubernetes, nomad or cloudfoundry).

Field Details

orchestrator.api_version

Type: keyword

Level: Extended

Description: API version being used to carry out the action

Example: v1beta1

Indexed: true

orchestrator.cluster.name

Type: keyword

Level: Extended

Description: Name of the cluster.

Indexed: true

orchestrator.cluster.url

Type: keyword

Level: Extended

Description: URL of the API used to manage the cluster.

Indexed: true

orchestrator.cluster.version

Type: keyword

Level: Extended

Description: The version of the cluster.

Indexed: true

orchestrator.namespace

Type: keyword

Level: Extended

Description: Namespace in which the action is taking place.

Example: kube-system

Indexed: true

orchestrator.organization

Type: keyword

Level: Extended

Description: Organization affected by the event (for multi-tenant orchestrator setups).

Example: elastic

Indexed: true

orchestrator.resource.name

Type: keyword

Level: Extended

Description: Name of the resource being acted upon.

Example: test-pod-cdcws

Indexed: true

orchestrator.resource.type

Type: keyword

Level: Extended

Description: Type of resource being acted upon.

Example: service

Indexed: true

orchestrator.type

Type: keyword

Level: Extended

Description: Orchestrator cluster type (e.g. kubernetes, nomad or cloudfoundry).

Example: kubernetes

Indexed: true