1
_time
3
apiVersion
5
app
7
awsRegion
9
aws_account_id
11
command
13
date_hour
15
date_mday
17
date_minute
19
date_month
21
date_second
23
date_wday
25
date_year
27
date_zone
29
dest
31
dvc
33
errorCode
35
eventCategory
37
eventID
39
eventName
41
eventSource
43
eventTime
45
eventType
47
eventVersion
49
eventtype
51
host
53
index
55
linecount
57
managementEvent
59
msg
61
object_category
63
product
65
punct
67
readOnly
69
recipientAccountId
71
region
73
requestID
75
requestParameters.logGroupName
77
requestParameters.logStreamName
79
responseElements
81
signature
83
source
85
sourceIPAddress
87
sourcetype
89
splunk_server
91
src
93
src_ip
95
start_time
97
tag
99
tag::eventtype
101
timeendpos
103
timestartpos
105
tlsDetails.cipherSuite
107
tlsDetails.clientProvidedHostHeader
109
tlsDetails.tlsVersion
111
user
113
userAgent
115
userIdentity.accessKeyId
117
userIdentity.accountId
119
userIdentity.arn
121
userIdentity.principalId
123
userIdentity.type
125
userIdentity.userName
127
userName
129
user_access_key
131
user_agent
133
user_arn
135
user_group_id
137
user_id
139
user_name
141
user_type
143
vendor
145
vendor_account
147
vendor_product
149
vendor_region
151
not set