WARNING: Version 6.2 of Packetbeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
MongoDb fieldsedit
MongoDB-specific event fields. These fields mirror closely the fields for the MongoDB wire protocol. The higher level fields (for example, query
and resource
) apply to MongoDB events as well.
mongodb.error
edit
If the MongoDB request has resulted in an error, this field contains the error message returned by the server.
mongodb.fullCollectionName
edit
The full collection name. The full collection name is the concatenation of the database name with the collection name, using a dot (.) for the concatenation. For example, for the database foo and the collection bar, the full collection name is foo.bar.
mongodb.numberToSkip
edit
type: long
Sets the number of documents to omit - starting from the first document in the resulting dataset - when returning the result of the query.
mongodb.numberToReturn
edit
type: long
The requested maximum number of documents to be returned.
mongodb.numberReturned
edit
type: long
The number of documents in the reply.
mongodb.startingFrom
edit
Where in the cursor this reply is starting.
mongodb.query
edit
A JSON document that represents the query. The query will contain one or more elements, all of which must match for a document to be included in the result set. Possible elements include $query, $orderby, $hint, $explain, and $snapshot.
mongodb.returnFieldsSelector
edit
A JSON document that limits the fields in the returned documents. The returnFieldsSelector contains one or more elements, each of which is the name of a field that should be returned, and the integer value 1.
mongodb.selector
edit
A BSON document that specifies the query for selecting the document to update or delete.
mongodb.update
edit
A BSON document that specifies the update to be performed. For information on specifying updates, see the Update Operations documentation from the MongoDB Manual.
mongodb.cursorId
edit
The cursor identifier returned in the OP_REPLY. This must be the value that was returned from the database.
rpc fieldsedit
OncRPC specific event fields.
rpc.xid
edit
RPC message transaction identifier.
rpc.call_size
edit
type: long
RPC call size with argument.
rpc.reply_size
edit
type: long
RPC reply size with argument.
rpc.status
edit
RPC message reply status.
rpc.time
edit
type: long
RPC message processing time.
rpc.time_str
edit
RPC message processing time in human readable form.
rpc.auth_flavor
edit
RPC authentication flavor.
rpc.cred.uid
edit
type: long
RPC caller’s user id, in case of auth-unix.
rpc.cred.gid
edit
type: long
RPC caller’s group id, in case of auth-unix.
rpc.cred.gids
edit
RPC caller’s secondary group ids, in case of auth-unix.
rpc.cred.stamp
edit
type: long
Arbitrary ID which the caller machine may generate.
rpc.cred.machinename
edit
The name of the caller’s machine.