1
_time
3
app
5
awsRegion
7
aws_account_id
9
command
11
date_hour
13
date_mday
15
date_minute
17
date_month
19
date_second
21
date_wday
23
date_year
25
date_zone
27
dest
29
dvc
31
errorCode
33
eventCategory
35
eventID
37
eventName
39
eventSource
41
eventTime
43
eventType
45
eventVersion
47
eventtype
49
host
51
index
53
linecount
55
managementEvent
57
msg
59
object_category
61
product
63
punct
65
readOnly
67
recipientAccountId
69
region
71
requestID
73
requestParameters.bypassPolicyLockoutSafetyCheck
75
requestParameters.customerMasterKeySpec
77
requestParameters.description
79
requestParameters.keyUsage
81
requestParameters.origin
83
requestParameters.policy
85
resources{}.ARN
87
resources{}.accountId
89
resources{}.type
91
responseElements.keyMetadata.aWSAccountId
93
responseElements.keyMetadata.arn
95
responseElements.keyMetadata.creationDate
97
responseElements.keyMetadata.customerMasterKeySpec
99
responseElements.keyMetadata.description
101
responseElements.keyMetadata.enabled
103
responseElements.keyMetadata.encryptionAlgorithms{}
105
responseElements.keyMetadata.keyId
107
responseElements.keyMetadata.keyManager
109
responseElements.keyMetadata.keyState
111
responseElements.keyMetadata.keyUsage
113
responseElements.keyMetadata.origin
115
signature
117
source
119
sourceIPAddress
121
sourcetype
123
splunk_server
125
src
127
src_ip
129
start_time
131
tag
133
tag::eventtype
135
timeendpos
137
timestartpos
139
user
141
userAgent
143
userIdentity.accessKeyId
145
userIdentity.accountId
147
userIdentity.arn
149
userIdentity.principalId
151
userIdentity.sessionContext.attributes.creationDate
153
userIdentity.sessionContext.attributes.mfaAuthenticated
155
userIdentity.sessionContext.sessionIssuer.accountId
157
userIdentity.sessionContext.sessionIssuer.arn
159
userIdentity.sessionContext.sessionIssuer.principalId
161
userIdentity.sessionContext.sessionIssuer.type
163
userIdentity.sessionContext.sessionIssuer.userName
165
userIdentity.type
167
userName
169
user_access_key
171
user_agent
173
user_arn
175
user_group_id
177
user_id
179
user_name
181
user_type
183
vendor
185
vendor_account
187
vendor_product
189
vendor_region
191
not set