Fields you Should Know

• Fields commonly found

  • Facility
  • Severity
  • Timestamp
  • Host
  • Tag
  • Message

• Not all of them always present – largely depending on implementation and configuration

• Fields can be used for filtering and processing