You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The first three fields are @timestamp, log.level and message. This lets you easily read the logs in a terminal without needing a tool that converts the logs to plain-text.
The above, however, does not seem to be the case.
For example, log.logger is the second field printed and the message field comes almost last.
Is there a way in which the order of the log event fields can be updated so at least the first three fields printed are @timestamp, log.level and message?
The text was updated successfully, but these errors were encountered:
On the page below I read about the benefits of ECS logging:
https://www.elastic.co/guide/en/ecs-logging/overview/current/intro.html#_why_ecs_logging
Particularly:
Decently human-readable JSON structure
The first three fields are
@timestamp
,log.level
andmessage
. This lets you easily read the logs in a terminal without needing a tool that converts the logs to plain-text.The above, however, does not seem to be the case.
For example,
log.logger
is the second field printed and themessage
field comes almost last.Is there a way in which the order of the log event fields can be updated so at least the first three fields printed are
@timestamp
,log.level
andmessage
?The text was updated successfully, but these errors were encountered: