Logs table
The logs table in the Log Search > Log discovery view lists log records according to search and filtering criteria. The fields available for a log record depend on the log source and how you process the logs. However, all logs contain the NXLog Agent core fields.
Core fields
The NXLog Agent adds the following fields to every log record it collects. The logs table displays these fields by default, and you can use them to search and filter your logs.
Field | Type | Description |
---|---|---|
EventReceivedTime |
The date and time that the NXLog Agent received or collected the log record.
The display format is |
|
Hostname |
The IP address or hostname where the event originated. |
|
SourceModuleName |
The user-defined name of the NXLog Agent input module instance that collected the log record. |
|
SourceModuleType |
The type of NXLog Agent input module instance (e.g., |
Standard fields
Apart from the core fields described above, the NXLog Agent contains a set of standard fields common to several modules.
Field | Type | Description |
---|---|---|
ErrorCode |
A number indicating the type of event. Error codes are vendor-specific and especially useful for event correlation. |
|
EventTime |
The date and time of the event. |
|
EventType |
This field describes the type of event according to the log source, e.g., for Windows events, it represents the severity ( |
|
Message |
The event message. In most cases, it contains user-friendly information about the recorded event. |
|
MessageSourceAddress |
The IP address of the remote host. Available in network modules (e.g., |
|
ProcessID |
The ID of the process that generated the event. |
|
Severity |
Severity name corresponding to the SeverityValue.
It can be one of |
|
SeverityValue |
NXLog Agent normalized severity value between 1-5. |
|
SourceName |
The application, service/daemon, or device that generated the event. |
Custom fields
The NXLog Agent may create additional fields according to the log source and the configuration. All fields will be available to display as table columns or to search and filter the logs table.
Consult the relevant NXLog Agent module documentation for a list of fields each module creates.