1
_time
3
app
5
awsRegion
7
aws_account_id
9
command
11
date_hour
13
date_mday
15
date_minute
17
date_month
19
date_second
21
date_wday
23
date_year
25
date_zone
27
dest
29
dvc
31
errorCode
33
eventCategory
35
eventID
37
eventName
39
eventSource
41
eventTime
43
eventType
45
eventVersion
47
eventtype
49
host
51
index
53
linecount
55
managementEvent
57
msg
59
object_category
61
product
63
punct
65
readOnly
67
recipientAccountId
69
region
71
requestID
73
requestParameters.detectorId
75
responseElements.__type
77
responseElements.message
79
result_id
81
signature
83
source
85
sourceIPAddress
87
sourcetype
89
splunk_server
91
src
93
src_ip
95
start_time
97
tag
99
tag::eventtype
101
timeendpos
103
timestartpos
105
user
107
userAgent
109
userIdentity.accessKeyId
111
userIdentity.accountId
113
userIdentity.arn
115
userIdentity.principalId
117
userIdentity.type
119
userIdentity.userName
121
userName
123
user_access_key
125
user_agent
127
user_arn
129
user_group_id
131
user_id
133
user_name
135
user_type
137
vendor
139
vendor_account
141
vendor_product
143
vendor_region
145
not set