1
_time
3
app
5
awsRegion
7
aws_account_id
9
command
11
date_hour
13
date_mday
15
date_minute
17
date_month
19
date_second
21
date_wday
23
date_year
25
date_zone
27
dest
29
dvc
31
errorCode
33
eventCategory
35
eventID
37
eventName
39
eventSource
41
eventTime
43
eventType
45
eventVersion
47
eventtype
49
host
51
index
53
linecount
55
managementEvent
57
msg
59
object_category
61
product
63
punct
65
readOnly
67
recipientAccountId
69
region
71
requestID
73
requestParameters.name
75
responseElements
77
signature
79
source
81
sourceIPAddress
83
sourcetype
85
splunk_server
87
src
89
src_ip
91
start_time
93
tag
95
tag::eventtype
97
timeendpos
99
timestartpos
101
tlsDetails.cipherSuite
103
tlsDetails.clientProvidedHostHeader
105
tlsDetails.tlsVersion
107
user
109
userAgent
111
userIdentity.accessKeyId
113
userIdentity.accountId
115
userIdentity.arn
117
userIdentity.principalId
119
userIdentity.type
121
userIdentity.userName
123
userName
125
user_access_key
127
user_agent
129
user_arn
131
user_group_id
133
user_id
135
user_name
137
user_type
139
vendor
141
vendor_account
143
vendor_product
145
vendor_region
147
not set