Core fields

NXLog Agent adds the following fields to every record it collects.

$raw_event (type: string): The data ingested by input modules, such as when reading logs from a file or receiving data over the network via TCP and UDP. This field is available when processing records, but is not included when converting data to a structured format, such as JSON or XML.
$EventReceivedTime (type: datetime): The date and time that NXLog Agent ingested the record. The value is not modified if the field already exists.
$Hostname (type: string): The hostname of the system where NXLog Agent is running. The value is not modified if the field already exists.
$SourceModuleName (type: string): The user-defined name of the NXLog Agent input module instance that collected or generated the record. The value is not modified if the field already exists.
$SourceModuleType (type: string): The type of NXLog Agent input module instance. For example, im_file. The value is not modified if the field already exists.