ECS Field Reference
ECS 8.17
Agent
⚠️ Outdated Version: You are viewing ECS version 8.17, which is outdated. View the latest version (9.0)
ECS Version:

Agent

Fields about the monitoring agent.

Fields

Field Summary

FieldTypeLevelDescription
agent.build.originalkeywordCoreExtended build information for the agent.
agent.ephemeral_idkeywordExtendedEphemeral identifier of this agent.
agent.idkeywordCoreUnique identifier of this agent.
agent.namekeywordCoreCustom name of the agent.
agent.typekeywordCoreType of the agent.
agent.versionkeywordCoreVersion of the agent.

Field Details

agent.build.original

Type: keyword

Level: Core

Description: Extended build information for the agent.

Example: metricbeat version 7.6.0 (amd64), libbeat 7.6.0 [6a23e8f8f30f5001ba344e4e54d8d9cb82cb107c built 2020-02-05 23:10:10 +0000 UTC]

Indexed: true

agent.ephemeral_id

Type: keyword

Level: Extended

Description: Ephemeral identifier of this agent.

Example: 8a4f500f

Indexed: true

agent.id

Type: keyword

Level: Core

Description: Unique identifier of this agent.

Example: 8a4f500d

Indexed: true

agent.name

Type: keyword

Level: Core

Description: Custom name of the agent.

Example: foo

Indexed: true

agent.type

Type: keyword

Level: Core

Description: Type of the agent.

Example: filebeat

Indexed: true

agent.version

Type: keyword

Level: Core

Description: Version of the agent.

Example: 6.0.0-rc2

Indexed: true