List down all Fields

[lukedevon]

Hi

How can we list down all the possible Fields under ALL EVENTS, in the dashboard?

According to Nagios LS online demo, http://nagiosls.demos.nagios.com/nagioslogserver/ it is possible to add all the fields comes over the log types. However as I checked, there are no specific configurations in Input filters.

May I know how can I get it done as those fields are really helpful for filtering data.

Thank you
Luke

[cdienger]

Fields are created from mappings that are in turn are from inputs, codecs, or other filters in the logstash configuration.

The syslog input for example will automatically extract information and map it to fields it creates when syslog data comes in. The JSON codec(see the default Windows Event Log and Import Files - JSON inputs for example) will automatically create fields based off of the data in a JSON source. The kv filter will also automatically create fields based off of key-value pairs. The geoip filter is another filter that will automatically create fields regarding an IP address' geolocation.

There's also the option of creating fields using grok filters. See https://assets.nagios.com/downloads/nag ... ilters.pdf for examples.

Hope this helps. Let us know if you have any questions.