1
_time
3
action
5
additionalEventData.AuthenticationMethod
7
additionalEventData.CipherSuite
9
additionalEventData.SignatureVersion
11
additionalEventData.bytesTransferredIn
13
additionalEventData.bytesTransferredOut
15
additionalEventData.x-amz-id-2
17
app
19
awsRegion
21
aws_account_id
23
change_type
25
command
27
date_hour
29
date_mday
31
date_minute
33
date_month
35
date_second
37
date_wday
39
date_year
41
date_zone
43
dest
45
dvc
47
errorCode
49
eventCategory
51
eventID
53
eventName
55
eventSource
57
eventTime
59
eventType
61
eventVersion
63
eventtype
65
host
67
index
69
linecount
71
managementEvent
73
msg
75
object
77
object_category
79
object_id
81
product
83
punct
85
readOnly
87
recipientAccountId
89
region
91
requestID
93
requestParameters.Host
95
requestParameters.accessControlList.x-amz-grant-write-acp
97
requestParameters.acl
99
requestParameters.bucketName
101
resources{}.ARN
103
resources{}.accountId
105
resources{}.type
107
responseElements
109
signature
111
source
113
sourceIPAddress
115
sourcetype
117
splunk_server
119
src
121
src_ip
123
src_user
125
start_time
127
status
129
tag
131
tag::eventtype
133
timeendpos
135
timestartpos
137
user
139
userAgent
141
userIdentity.accessKeyId
143
userIdentity.accountId
145
userIdentity.arn
147
userIdentity.principalId
149
userIdentity.type
151
userIdentity.userName
153
userName
155
user_access_key
157
user_agent
159
user_arn
161
user_group_id
163
user_id
165
user_name
167
vendor
169
vendor_account
171
vendor_product
173
vendor_region
175
not set