Core fields
The following fields are used by core.
$raw_event(type: string)- 
The data received from stream modules (im_file, im_tcp, etc.).
 
$EventReceivedTime(type: datetime)- 
The time when the event is received. The value is not modified if the field already exists.
 
$Hostname(type: string)- 
The name of the host where the nxlog is running. The value is not modified if the field already exists.
 
$SourceModuleName(type: string)- 
The name of the module instance, for input modules. The value is not modified if the field already exists.
 
$SourceModuleType(type: string)- 
The type of module instance (such as
im_file), for input modules. The value is not modified if the field already exists.