html/server/7.14/exported-fields-apm-error.html

<!DOCTYPE html>
<html lang="en-us">
  <head>
    
<meta charset="UTF-8">
<title>APM Error fields | APM Server Reference [7.14] | Elastic</title>
<meta class="elastic" name="content" content="APM Error fields | APM Server Reference [7.14]">

<link rel="home" href="index.html" title="APM Server Reference [7.14]"/>
<link rel="up" href="exported-fields.html" title="Exported fields"/>
<link rel="prev" href="exported-fields-apm-application-metrics.html" title="APM Application Metrics fields"/>
<link rel="next" href="exported-fields-apm-profile.html" title="APM Profile fields"/>
<meta class="elastic" name="product_version" content="7.14"/>
<meta class="elastic" name="product_name" content="APM"/>
<meta class="elastic" name="website_area" content="documentation"/>
<meta name="DC.type" content="Learn/Docs/APM Server/Reference/7.14"/>
<meta name="DC.subject" content="APM"/>
<meta name="DC.identifier" content="7.14"/>
<meta name="robots" content="noindex,nofollow"/>

    <meta http-equiv="content-type" content="text/html; charset=utf-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <script src="https://cdn.optimizely.com/js/18132920325.js"></script>
    <link rel="apple-touch-icon" sizes="57x57" href="/apple-icon-57x57.png">
    <link rel="apple-touch-icon" sizes="60x60" href="/apple-icon-60x60.png">
    <link rel="apple-touch-icon" sizes="72x72" href="/apple-icon-72x72.png">
    <link rel="apple-touch-icon" sizes="76x76" href="/apple-icon-76x76.png">
    <link rel="apple-touch-icon" sizes="114x114" href="/apple-icon-114x114.png">
    <link rel="apple-touch-icon" sizes="120x120" href="/apple-icon-120x120.png">
    <link rel="apple-touch-icon" sizes="144x144" href="/apple-icon-144x144.png">
    <link rel="apple-touch-icon" sizes="152x152" href="/apple-icon-152x152.png">
    <link rel="apple-touch-icon" sizes="180x180" href="/apple-icon-180x180.png">
    <link rel="icon" type="image/png" href="/favicon-32x32.png" sizes="32x32">
    <link rel="icon" type="image/png" href="/android-chrome-192x192.png" sizes="192x192">
    <link rel="icon" type="image/png" href="/favicon-96x96.png" sizes="96x96">
    <link rel="icon" type="image/png" href="/favicon-16x16.png" sizes="16x16">
    <link rel="manifest" href="/manifest.json">
    <meta name="apple-mobile-web-app-title" content="Elastic">
    <meta name="application-name" content="Elastic">
    <meta name="msapplication-TileColor" content="#ffffff">
    <meta name="msapplication-TileImage" content="/mstile-144x144.png">
    <meta name="theme-color" content="#ffffff">
    <meta name="naver-site-verification" content="936882c1853b701b3cef3721758d80535413dbfd" />
    <meta name="yandex-verification" content="d8a47e95d0972434" />
    <meta name="localized" content="true" />
    <meta name="st:robots" content="follow,index" />
    <meta property="og:image" content="https://static-www.elastic.co/v3/assets/bltefdd0b53724fa2ce/blt280217a63b82a734/6202d3378b1f312528798412/elastic-logo.svg" />
    <meta property="og:image:width" content="500" />
    <meta property="og:image:height" content="172" />
    <link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">
    <link rel="icon" href="/favicon.ico" type="image/x-icon">
    <link rel="apple-touch-icon-precomposed" sizes="64x64" href="/favicon_64x64_16bit.png">
    <link rel="apple-touch-icon-precomposed" sizes="32x32" href="/favicon_32x32.png">
    <link rel="apple-touch-icon-precomposed" sizes="16x16" href="/favicon_16x16.png">
    <!-- Give IE8 a fighting chance -->
    <!--[if lt IE 9]>
    <script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
    <script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
    <![endif]-->
    <link rel="stylesheet" type="text/css" href="/guide/static/styles-v1.css" />
  </head>

  <!--© 2015-2025 Elasticsearch B.V. -->
  <!-- All Elastic documentation is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License. -->
  <!-- http://creativecommons.org/licenses/by-nc-nd/4.0/ -->

  <body>
    <!-- Google Tag Manager -->
    <script>dataLayer = [];</script><noscript><iframe src="//www.googletagmanager.com/ns.html?id=GTM-58RLH5" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
    <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= '//www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-58RLH5');</script>
    <!-- End Google Tag Manager -->

    <!-- Global site tag (gtag.js) - Google Analytics -->
    <script async src="https://www.googletagmanager.com/gtag/js?id=UA-12395217-16"></script>
    <script>
      window.dataLayer = window.dataLayer || [];
      function gtag(){dataLayer.push(arguments);}
      gtag('js', new Date());
      gtag('config', 'UA-12395217-16');
    </script>

    <!-- Google Tag Manager for GA4 -->
    <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','GTM-KNJMG2M');</script>
    <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KNJMG2M" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
    <!-- End Google Tag Manager for GA4-->

    <div id='elastic-nav' style="display:none;"></div>
    <script src='https://www.elastic.co/elastic-nav.js'></script>

    <div class="main-container">
      <section id="content" >
        <div class="content-wrapper">

          <section id="guide" lang="en">
            <div class="container-fluid">
              <div class="row pb-3">
                <div class="col-12 order-2 col-md-4 order-md-1 col-lg-3 h-almost-full-md sticky-top-md" id="left_col">
                  <!-- The TOC is appended here -->
                </div>

                <div class="col-12 order-1 col-md-8 order-md-2 col-lg-7 order-lg-2 guide-section" id="middle_col">
                  <!-- start body -->
                  
<div class="page_header">
A newer version is available. For the latest information, see the
<a href="../current/index.html">current release documentation</a>.
</div>
<div class="navheader">
<span class="prev">
<a href="exported-fields-apm-application-metrics.html">« APM Application Metrics fields</a>
</span>
<span class="next">
<a href="exported-fields-apm-profile.html">APM Profile fields »</a>
</span>
</div>
<div class="book" lang="en">
<div class="titlepage">
<div class="breadcrumbs">
<span class="breadcrumb-link"><a href="/guide/">Elastic Docs</a></span>
<span class="chevron-right">›</span><span class="breadcrumb-link">
  <div id="related-products" class="dropdown">
  <div class="related-products-title">APM:</div>
  <div class="dropdown-anchor" tabindex="0">Server Reference<span class="dropdown-icon"></span></div>
  <div class="dropdown-content">
  <ul>
  <li class="dropdown-category">APM</li>
  <ul>
  <li><a href="/guide/en/observability/current/apm.html">Observability › APM</a></li>
  </ul>
  <li class="dropdown-category">APM agents</li>
  <ul>
  <li><a href="/guide/en/apm/agent/android/current/intro.html">Android Agent Reference</a></li>
  <li><a href="/guide/en/apm/agent/go/current/introduction.html">Go Agent Reference</a></li>
  <li><a href="/guide/en/apm/agent/swift/current/intro.html">iOS Agent Reference</a></li>
  <li><a href="/guide/en/apm/agent/java/current/intro.html">Java Agent Reference</a></li>
  <li><a href="/guide/en/apm/agent/dotnet/current/intro.html">.NET Agent Reference</a></li>
  <li><a href="/guide/en/apm/agent/nodejs/current/intro.html">Node.js Agent Reference</a></li>
  <li><a href="/guide/en/apm/agent/php/current/intro.html">PHP Agent Reference</a></li>
  <li><a href="/guide/en/apm/agent/python/current/getting-started.html">Python Agent Reference</a></li>
  <li><a href="/guide/en/apm/agent/ruby/current/introduction.html">Ruby Agent Reference</a></li>
  <li><a href="/guide/en/apm/agent/rum-js/current/intro.html">Real User Monitoring JavaScript Agent Reference</a></li>
  </ul>
  <li class="dropdown-category">APM extensions</li>
  <ul>
  <li><a href="/guide/en/apm/lambda/current/aws-lambda-arch.html">AWS Lambda extension</a></li>
  <li><a href="/guide/en/apm/attacher/current/apm-attacher.html">Attacher</a></li>
  </ul>
  </ul>
  </div>
  </div>
<span class="chevron-right">›</span><span class="breadcrumb-link"><a href="exported-fields.html">Exported fields</a></span>
</div>
<div>
<div><h1 class="title"><a id="id-1"></a>APM Error fields</h1><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
</div>
<!--EXTRA-->
</div>
<div id="content">
<div id="url-to-v3" class="version-warning">
    <strong>IMPORTANT</strong>: This documentation is no longer updated. Refer to <a href="https://www.elastic.co/support/eol">Elastic's version policy</a> and the <a href="https://www.elastic.co/docs">latest documentation</a>.
</div>
<div class="chapter">
<div class="titlepage"><div><div>
<div class="position-relative"><h2 class="title"><a id="exported-fields-apm-error"></a>APM Error fields</h2><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
</div></div></div>
<p>Error-specific data for APM</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">processor.name</code></strong></span>
</span>
</dt>
<dd>
<p>Processor name.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">processor.event</code></strong></span>
</span>
</dt>
<dd>
<p>Processor event.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">timestamp.us</code></strong></span>
</span>
</dt>
<dd>
<p>Timestamp of the event in microseconds since Unix epoch.</p>
<p>type: long</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_url"></a>url</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>A complete Url, with scheme, host and path.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">url.scheme</code></strong></span>
</span>
</dt>
<dd>
<p>The protocol of the request, e.g. "https:".</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">url.full</code></strong></span>
</span>
</dt>
<dd>
<p>The full, possibly agent-assembled URL of the request, e.g <a href="https://example.com:443/search?q=elasticsearch#top" class="ulink" target="_top">https://example.com:443/search?q=elasticsearch#top</a>.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">url.domain</code></strong></span>
</span>
</dt>
<dd>
<p>The hostname of the request, e.g. "example.com".</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">url.port</code></strong></span>
</span>
</dt>
<dd>
<p>The port of the request, e.g. 443.</p>
<p>type: long</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">url.path</code></strong></span>
</span>
</dt>
<dd>
<p>The path of the request, e.g. "/search".</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">url.query</code></strong></span>
</span>
</dt>
<dd>
<p>The query string of the request, e.g. "q=elasticsearch".</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">url.fragment</code></strong></span>
</span>
</dt>
<dd>
<p>A fragment specifying a location in a web page , e.g. "top".</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">http.version</code></strong></span>
</span>
</dt>
<dd>
<p>The http version of the request leading to this event.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">http.request.method</code></strong></span>
</span>
</dt>
<dd>
<p>The http method of the request leading to this event.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">http.request.headers</code></strong></span>
</span>
</dt>
<dd>
<p>The canonical headers of the monitored HTTP request.</p>
<p>type: object</p>
<p>Object is not enabled.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">http.request.referrer</code></strong></span>
</span>
</dt>
<dd>
<p>Referrer for this HTTP request.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">http.response.status_code</code></strong></span>
</span>
</dt>
<dd>
<p>The status code of the HTTP response.</p>
<p>type: long</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">http.response.finished</code></strong></span>
</span>
</dt>
<dd>
<p>Used by the Node agent to indicate when in the response life cycle an error has occurred.</p>
<p>type: boolean</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">http.response.headers</code></strong></span>
</span>
</dt>
<dd>
<p>The canonical headers of the monitored HTTP response.</p>
<p>type: object</p>
<p>Object is not enabled.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">labels</code></strong></span>
</span>
</dt>
<dd>
<p>A flat mapping of user-defined labels with string, boolean or number values.</p>
<p>type: object</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_service"></a>service</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Service fields.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.name</code></strong></span>
</span>
</dt>
<dd>
<p>Immutable name of the service emitting this event.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.version</code></strong></span>
</span>
</dt>
<dd>
<p>Version of the service emitting this event.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.environment</code></strong></span>
</span>
</dt>
<dd>
<p>Service environment.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.node.name</code></strong></span>
</span>
</dt>
<dd>
<p>Unique meaningful name of the service node.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.language.name</code></strong></span>
</span>
</dt>
<dd>
<p>Name of the programming language used.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.language.version</code></strong></span>
</span>
</dt>
<dd>
<p>Version of the programming language used.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.runtime.name</code></strong></span>
</span>
</dt>
<dd>
<p>Name of the runtime used.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.runtime.version</code></strong></span>
</span>
</dt>
<dd>
<p>Version of the runtime used.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.framework.name</code></strong></span>
</span>
</dt>
<dd>
<p>Name of the framework used.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">service.framework.version</code></strong></span>
</span>
</dt>
<dd>
<p>Version of the framework used.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">transaction.id</code></strong></span>
</span>
</dt>
<dd>
<p>The transaction ID.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">transaction.sampled</code></strong></span>
</span>
</dt>
<dd>
<p>Transactions that are <em>sampled</em> will include all available information. Transactions that are not sampled will not have spans or context.</p>
<p>type: boolean</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">transaction.type</code></strong></span>
</span>
</dt>
<dd>
<p>Keyword of specific relevance in the service&#8217;s domain (eg. <em>request</em>, <em>backgroundjob</em>, etc)</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">transaction.name</code></strong></span>
</span>
</dt>
<dd>
<p>Generic designation of a transaction in the scope of a single service (eg. <em>GET /users/:id</em>).</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">transaction.name.text</code></strong></span>
</span>
</dt>
<dd>
<p>type: text</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">trace.id</code></strong></span>
</span>
</dt>
<dd>
<p>The ID of the trace to which the event belongs to.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">parent.id</code></strong></span>
</span>
</dt>
<dd>
<p>The ID of the parent event.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">agent.name</code></strong></span>
</span>
</dt>
<dd>
<p>Name of the agent used.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">agent.version</code></strong></span>
</span>
</dt>
<dd>
<p>Version of the agent used.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">agent.ephemeral_id</code></strong></span>
</span>
</dt>
<dd>
<p>The Ephemeral ID identifies a running process.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_container"></a>container</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Container fields are used for meta information about the specific container that is the source of information. These fields help correlate data based containers from any runtime.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">container.id</code></strong></span>
</span>
</dt>
<dd>
<p>Unique container id.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_kubernetes"></a>kubernetes</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Kubernetes metadata reported by agents</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">kubernetes.namespace</code></strong></span>
</span>
</dt>
<dd>
<p>Kubernetes namespace</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">kubernetes.node.name</code></strong></span>
</span>
</dt>
<dd>
<p>Kubernetes node name</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">kubernetes.pod.name</code></strong></span>
</span>
</dt>
<dd>
<p>Kubernetes pod name</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">kubernetes.pod.uid</code></strong></span>
</span>
</dt>
<dd>
<p>Kubernetes Pod UID</p>
<p>type: keyword</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_network"></a>network</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Optional network fields</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">network.connection_type</code></strong></span>
</span>
</dt>
<dd>
<p>Cellular network technology, eg. 4G</p>
<p>type: keyword</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_carrier"></a>carrier</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Network operator</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">network.carrier.name</code></strong></span>
</span>
</dt>
<dd>
<p>Carrier name, eg. Vodafone, T-Mobile, etc.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">network.carrier.mcc</code></strong></span>
</span>
</dt>
<dd>
<p>Mobile country code</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">network.carrier.mnc</code></strong></span>
</span>
</dt>
<dd>
<p>Mobile network code</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">network.carrier.icc</code></strong></span>
</span>
</dt>
<dd>
<p>ISO country code, eg. US</p>
<p>type: keyword</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_host"></a>host</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Optional host fields.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">host.architecture</code></strong></span>
</span>
</dt>
<dd>
<p>The architecture of the host the event was recorded on.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">host.hostname</code></strong></span>
</span>
</dt>
<dd>
<p>The hostname of the host the event was recorded on.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">host.name</code></strong></span>
</span>
</dt>
<dd>
<p>Name of the host the event was recorded on. It can contain same information as host.hostname or a name specified by the user.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">host.ip</code></strong></span>
</span>
</dt>
<dd>
<p>IP of the host that records the event.</p>
<p>type: ip</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_os"></a>os</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>The OS fields contain information about the operating system.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">host.os.platform</code></strong></span>
</span>
</dt>
<dd>
<p>The platform of the host the event was recorded on.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_process"></a>process</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Information pertaining to the running process where the data was collected</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">process.args</code></strong></span>
</span>
</dt>
<dd>
<p>Process arguments. May be filtered to protect sensitive information.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">process.pid</code></strong></span>
</span>
</dt>
<dd>
<p>Numeric process ID of the service process.</p>
<p>type: long</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">process.ppid</code></strong></span>
</span>
</dt>
<dd>
<p>Numeric ID of the service&#8217;s parent process.</p>
<p>type: long</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">process.title</code></strong></span>
</span>
</dt>
<dd>
<p>Service process title.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">observer.listening</code></strong></span>
</span>
</dt>
<dd>
<p>Address the server is listening on.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">observer.hostname</code></strong></span>
</span>
</dt>
<dd>
<p>Hostname of the APM Server.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">observer.version</code></strong></span>
</span>
</dt>
<dd>
<p>APM Server version.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">observer.version_major</code></strong></span>
</span>
</dt>
<dd>
<p>Major version number of the observer</p>
<p>type: byte</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">observer.type</code></strong></span>
</span>
</dt>
<dd>
<p>The type will be set to <code class="literal">apm-server</code>.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user.name</code></strong></span>
</span>
</dt>
<dd>
<p>The username of the logged in user.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user.domain</code></strong></span>
</span>
</dt>
<dd>
<p>Domain of the logged in user.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user.id</code></strong></span>
</span>
</dt>
<dd>
<p>Identifier of the logged in user.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user.email</code></strong></span>
</span>
</dt>
<dd>
<p>Email of the logged in user.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">client.domain</code></strong></span>
</span>
</dt>
<dd>
<p>Client domain.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">client.ip</code></strong></span>
</span>
</dt>
<dd>
<p>IP address of the client of a recorded event. This is typically obtained from a request&#8217;s X-Forwarded-For or the X-Real-IP header or falls back to a given configuration for remote address.</p>
<p>type: ip</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">client.port</code></strong></span>
</span>
</dt>
<dd>
<p>Port of the client.</p>
<p>type: long</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">source.domain</code></strong></span>
</span>
</dt>
<dd>
<p>Source domain.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">source.ip</code></strong></span>
</span>
</dt>
<dd>
<p>IP address of the source of a recorded event. This is typically obtained from a request&#8217;s X-Forwarded-For or the X-Real-IP header or falls back to a given configuration for remote address.</p>
<p>type: ip</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">source.port</code></strong></span>
</span>
</dt>
<dd>
<p>Port of the source.</p>
<p>type: long</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_destination"></a>destination</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Destination fields describe details about the destination of a packet/event.
Destination fields are usually populated in conjunction with source fields.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">destination.address</code></strong></span>
</span>
</dt>
<dd>
<p>Some event destination addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket.  You should always store the raw address in the <code class="literal">.address</code> field. Then it should be duplicated to <code class="literal">.ip</code> or <code class="literal">.domain</code>, depending on which one it is.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">destination.ip</code></strong></span>
</span>
</dt>
<dd>
<p>IP addess of the destination. Can be one of multiple IPv4 or IPv6 addresses.</p>
<p>type: ip</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">destination.port</code></strong></span>
</span>
</dt>
<dd>
<p>Port of the destination.</p>
<p>type: long</p>
<p>format: string</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_user_agent"></a>user_agent</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>The user_agent fields normally come from a browser request. They often show up in web service logs coming from the parsed user agent string.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.original</code></strong></span>
</span>
</dt>
<dd>
<p>Unparsed version of the user_agent.</p>
<p>type: keyword</p>
<p>example: Mozilla/5.0 (iPhone; CPU iPhone OS 12_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.original.text</code></strong></span>
</span>
</dt>
<dd>
<p>Software agent acting in behalf of a user, eg. a web browser / OS combination.</p>
<p>type: text</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.name</code></strong></span>
</span>
</dt>
<dd>
<p>Name of the user agent.</p>
<p>type: keyword</p>
<p>example: Safari</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.version</code></strong></span>
</span>
</dt>
<dd>
<p>Version of the user agent.</p>
<p>type: keyword</p>
<p>example: 12.0</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_device"></a>device</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Information concerning the device.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.device.name</code></strong></span>
</span>
</dt>
<dd>
<p>Name of the device.</p>
<p>type: keyword</p>
<p>example: iPhone</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_os_2"></a>os</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>The OS fields contain information about the operating system.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.os.platform</code></strong></span>
</span>
</dt>
<dd>
<p>Operating system platform (such centos, ubuntu, windows).</p>
<p>type: keyword</p>
<p>example: darwin</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.os.name</code></strong></span>
</span>
</dt>
<dd>
<p>Operating system name, without the version.</p>
<p>type: keyword</p>
<p>example: Mac OS X</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.os.full</code></strong></span>
</span>
</dt>
<dd>
<p>Operating system name, including the version or code name.</p>
<p>type: keyword</p>
<p>example: Mac OS Mojave</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.os.family</code></strong></span>
</span>
</dt>
<dd>
<p>OS family (such as redhat, debian, freebsd, windows).</p>
<p>type: keyword</p>
<p>example: debian</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.os.version</code></strong></span>
</span>
</dt>
<dd>
<p>Operating system version as a raw string.</p>
<p>type: keyword</p>
<p>example: 10.14.1</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">user_agent.os.kernel</code></strong></span>
</span>
</dt>
<dd>
<p>Operating system kernel version as a raw string.</p>
<p>type: keyword</p>
<p>example: 4.4.0-112-generic</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">experimental</code></strong></span>
</span>
</dt>
<dd>
<p>Additional experimental data sent by the agents.</p>
<p>type: object</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_cloud"></a>cloud</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Cloud metadata reported by agents</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.account.id</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud account ID</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.account.name</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud account name</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.availability_zone</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud availability zone name</p>
<p>type: keyword</p>
<p>example: us-east1-a</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.instance.id</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud instance/machine ID</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.instance.name</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud instance/machine name</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.machine.type</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud instance/machine type</p>
<p>type: keyword</p>
<p>example: t2.medium</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.project.id</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud project ID</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.project.name</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud project name</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.provider</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud provider name</p>
<p>type: keyword</p>
<p>example: gcp</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.region</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud region name</p>
<p>type: keyword</p>
<p>example: us-east1</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">cloud.service.name</code></strong></span>
</span>
</dt>
<dd>
<p>Cloud service name, intended to distinguish services running on different platforms within a provider.</p>
<p>type: keyword</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_error"></a>error</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Data captured by an agent representing an event occurring in a monitored service.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.id</code></strong></span>
</span>
</dt>
<dd>
<p>The ID of the error.</p>
<p>type: keyword</p>
<p><span class="image"><img src="https://doc-icons.s3.us-east-2.amazonaws.com/icon-yes.png" alt="Yes" width="20" height="15"></span> <a href="/guide/en/ecs/1.8" class="ulink" target="_top">ECS</a> field.</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.culprit</code></strong></span>
</span>
</dt>
<dd>
<p>Function call which was the primary perpetrator of this event.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.grouping_key</code></strong></span>
</span>
</dt>
<dd>
<p>Hash of select properties of the logged error for grouping purposes.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.grouping_name</code></strong></span>
</span>
</dt>
<dd>
<p>Name to associate with an error group. Errors belonging to the same group (same grouping_key) may have differing values for grouping_name. Consumers may choose one arbitrarily.</p>
<p>type: keyword</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_exception"></a>exception</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Information about the originally thrown error.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.exception.code</code></strong></span>
</span>
</dt>
<dd>
<p>The error code set when the error happened, e.g. database error code.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.exception.message</code></strong></span>
</span>
</dt>
<dd>
<p>The original error message.</p>
<p>type: text</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.exception.module</code></strong></span>
</span>
</dt>
<dd>
<p>The module namespace of the original error.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.exception.type</code></strong></span>
</span>
</dt>
<dd>
<p>The type of the original error, e.g. the Java exception class name.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.exception.handled</code></strong></span>
</span>
</dt>
<dd>
<p>Indicator whether the error was caught somewhere in the code or not.</p>
<p>type: boolean</p>
</dd>
</dl>
</div>
<div class="position-relative"><h3><a id="_log"></a>log</h3><a class="edit_me" rel="nofollow" title="Edit this page on GitHub" href="https://github.com/elastic/apm-server/edit/7.14/docs/fields.asciidoc">edit</a></div>
<p>Additional information added by logging the error.</p>
<div class="variablelist">
<dl class="variablelist">
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.log.level</code></strong></span>
</span>
</dt>
<dd>
<p>The severity of the record.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.log.logger_name</code></strong></span>
</span>
</dt>
<dd>
<p>The name of the logger instance used.</p>
<p>type: keyword</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.log.message</code></strong></span>
</span>
</dt>
<dd>
<p>The additionally logged error message.</p>
<p>type: text</p>
</dd>
<dt>
<span class="term">
<span class="strong strong"><strong><code class="literal">error.log.param_message</code></strong></span>
</span>
</dt>
<dd>
<p>A parametrized message. E.g. <em>Could not connect to %s</em>. The property message is still required, and should be equal to the param_message, but with placeholders replaced. In some situations the param_message is used to group errors together.</p>
<p>type: keyword</p>
</dd>
</dl>
</div>
</div>
</div>
</div><div class="navfooter">
<span class="prev">
<a href="exported-fields-apm-application-metrics.html">« APM Application Metrics fields</a>
</span>
<span class="next">
<a href="exported-fields-apm-profile.html">APM Profile fields »</a>
</span>
</div>

                  <!-- end body -->
                </div>

                <div class="col-12 order-3 col-lg-2 order-lg-3 h-almost-full-lg sticky-top-lg" id="right_col">
                  <div id="sticky_content">
                    <!-- The OTP is appended here -->
                    <div class="row">
                      <div class="col-0 col-md-4 col-lg-0" id="bottom_left_col"></div>
                      <div class="col-12 col-md-8 col-lg-12">
                        <div id="rtpcontainer">
                          <div class="mktg-promo" id="most-popular">
                            <p class="aside-heading">Most Popular</p>
                            <div class="pb-2">
                              <p class="media-type">Video</p>
                              <a href="https://www.elastic.co/webinars/getting-started-elasticsearch?page=docs&placement=top-video">
                                <p class="mb-0">Get Started with Elasticsearch</p>
                              </a>
                            </div>
                            <div class="pb-2">
                              <p class="media-type">Video</p>
                              <a href="https://www.elastic.co/webinars/getting-started-kibana?page=docs&placement=top-video">
                                <p class="mb-0">Intro to Kibana</p>
                              </a>
                            </div>
                            <div class="pb-2">
                              <p class="media-type">Video</p>
                              <a href="https://www.elastic.co/webinars/introduction-elk-stack?page=docs&placement=top-video">
                                <p class="mb-0">ELK for Logs & Metrics</p>
                              </a>
                            </div>
                          </div>
                        </div>

                        <!-- Feedback widget -->
                        <div id="feedbackWidgetContainer"></div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </section>

        </div>


        <div id='elastic-footer'></div>
        <script src='https://www.elastic.co/elastic-footer.js'></script>
        <!-- Footer Section end-->

      </section>
    </div>

    <!-- Feedback modal -->
    <div id="feedbackModalContainer"></div>

    <script src="/guide/static/jquery.js"></script>
    <script type="text/javascript" src="/guide/static/docs-v1.js"></script>
    <script type="text/javascript">
  window.initial_state = {}</script>
  </body>
</html>