Container
Fields describing the container that generated this event.
Fields
Field Summary
| Field | Type | Level | Description |
|---|---|---|---|
container.cpu.usage | scaled_float | Extended | Percent CPU used, between 0 and 1. |
container.disk.read.bytes | long | Extended | The number of bytes read by all disks. |
container.disk.write.bytes | long | Extended | The number of bytes written on all disks. |
container.id | keyword | Core | Unique container id. |
container.image.hash.all | keyword | Extended | An array of digests of the image the container was built on. |
container.image.name | keyword | Extended | Name of the image the container was built on. |
container.image.tag | keyword | Extended | Container image tags. |
container.labels | object | Extended | Image labels. |
container.memory.usage | scaled_float | Extended | Percent memory used, between 0 and 1. |
container.name | keyword | Extended | Container name. |
container.network.egress.bytes | long | Extended | The number of bytes sent on all network interfaces. |
container.network.ingress.bytes | long | Extended | The number of bytes received on all network interfaces. |
container.runtime | keyword | Extended | Runtime managing this container. |
container.security_context.privileged | boolean | Extended | Indicates whether the container is running in privileged mode. |
Field Details
container.cpu.usage
Type: scaled_float
Level: Extended
Description: Percent CPU used, between 0 and 1.
Indexed: true
container.disk.read.bytes
Type: long
Level: Extended
Description: The number of bytes read by all disks.
Indexed: true
container.disk.write.bytes
Type: long
Level: Extended
Description: The number of bytes written on all disks.
Indexed: true
container.id
Type: keyword
Level: Core
Description: Unique container id.
Indexed: true
container.image.hash.all
Type: keyword
Level: Extended
Description: An array of digests of the image the container was built on.
Example: [sha256:f8fefc80e3273dc756f288a63945820d6476ad64883892c771b5e2ece6bf1b26]
Normalization: array
Indexed: true
container.image.name
Type: keyword
Level: Extended
Description: Name of the image the container was built on.
Indexed: true
container.image.tag
Type: keyword
Level: Extended
Description: Container image tags.
Normalization: array
Indexed: true
container.labels
Type: object
Level: Extended
Description: Image labels.
Indexed: true
container.memory.usage
Type: scaled_float
Level: Extended
Description: Percent memory used, between 0 and 1.
Indexed: true
container.name
Type: keyword
Level: Extended
Description: Container name.
Indexed: true
container.network.egress.bytes
Type: long
Level: Extended
Description: The number of bytes sent on all network interfaces.
Indexed: true
container.network.ingress.bytes
Type: long
Level: Extended
Description: The number of bytes received on all network interfaces.
Indexed: true
container.runtime
Type: keyword
Level: Extended
Description: Runtime managing this container.
Example: docker
Indexed: true
container.security_context.privileged
Type: boolean
Level: Extended
Description: Indicates whether the container is running in privileged mode.
Indexed: true