ECS Field Reference
HTTP
ECS Version:

HTTP

Fields describing an HTTP request.

Fields

Field Summary

FieldTypeLevelDescription
http.request.body.byteslongExtendedSize in bytes of the request body.
http.request.body.contentwildcardExtendedThe full HTTP request body.
http.request.body.content.textmatch_only_textExtendedThe full HTTP request body.
http.request.byteslongExtendedTotal size in bytes of the request (body and headers).
http.request.idkeywordExtendedHTTP request ID.
http.request.methodkeywordExtendedHTTP request method.
http.request.mime_typekeywordExtendedMime type of the body of the request.
http.request.referrerkeywordExtendedReferrer for this HTTP request.
http.response.body.byteslongExtendedSize in bytes of the response body.
http.response.body.contentwildcardExtendedThe full HTTP response body.
http.response.body.content.textmatch_only_textExtendedThe full HTTP response body.
http.response.byteslongExtendedTotal size in bytes of the response (body and headers).
http.response.mime_typekeywordExtendedMime type of the body of the response.
http.response.status_codelongExtendedHTTP response status code.
http.versionkeywordExtendedHTTP version.

Field Details

http.request.body.bytes

Type: long

Level: Extended

Description: Size in bytes of the request body.

Example: 887

Indexed: true

http.request.body.content

Type: wildcard

Level: Extended

Description: The full HTTP request body.

Example: Hello world

Indexed: true

http.request.body.content.text

Type: match_only_text

Level: Extended

Description: The full HTTP request body.

Example: Hello world

Indexed: true

http.request.bytes

Type: long

Level: Extended

Description: Total size in bytes of the request (body and headers).

Example: 1437

Indexed: true

http.request.id

Type: keyword

Level: Extended

Description: HTTP request ID.

Example: 123e4567-e89b-12d3-a456-426614174000

Indexed: true

http.request.method

Type: keyword

Level: Extended

Description: HTTP request method.

Example: POST

Indexed: true

http.request.mime_type

Type: keyword

Level: Extended

Description: Mime type of the body of the request.

Example: image/gif

Indexed: true

http.request.referrer

Type: keyword

Level: Extended

Description: Referrer for this HTTP request.

Example: https://blog.example.com/

Indexed: true

http.response.body.bytes

Type: long

Level: Extended

Description: Size in bytes of the response body.

Example: 887

Indexed: true

http.response.body.content

Type: wildcard

Level: Extended

Description: The full HTTP response body.

Example: Hello world

Indexed: true

http.response.body.content.text

Type: match_only_text

Level: Extended

Description: The full HTTP response body.

Example: Hello world

Indexed: true

http.response.bytes

Type: long

Level: Extended

Description: Total size in bytes of the response (body and headers).

Example: 1437

Indexed: true

http.response.mime_type

Type: keyword

Level: Extended

Description: Mime type of the body of the response.

Example: image/gif

Indexed: true

http.response.status_code

Type: long

Level: Extended

Description: HTTP response status code.

Example: 404

Indexed: true

http.version

Type: keyword

Level: Extended

Description: HTTP version.

Example: 1.1

Indexed: true