https://logit.io/docs/_next/static/chunks/pages/ecs-field-reference/8.17/server-ee4c67d56cdedb25.js

1(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[931],{44428:function(e,r,s){(window.__NEXT_P=window.__NEXT_P||[]).push(["/ecs-field-reference/8.17/server",function(){return s(69894)}])},69894:function(e,r,s){"use strict";s.r(r),s.d(r,{__toc:function(){return l}});var n=s(85893),d=s(31379),i=s(9575),t=s(67904),c=s(34908);let l=[{depth:2,value:"Fields",id:"fields"},{depth:3,value:"Field Summary",id:"field-summary"},{depth:2,value:"Field Details",id:"field-details"},{depth:3,value:"server.address",id:"serveraddress"},{depth:3,value:"server.as.number",id:"serverasnumber"},{depth:3,value:"server.as.organization.name",id:"serverasorganizationname"},{depth:3,value:"server.as.organization.name.text",id:"serverasorganizationnametext"},{depth:3,value:"server.bytes",id:"serverbytes"},{depth:3,value:"server.domain",id:"serverdomain"},{depth:3,value:"server.geo.city_name",id:"servergeocity_name"},{depth:3,value:"server.geo.continent_code",id:"servergeocontinent_code"},{depth:3,value:"server.geo.continent_name",id:"servergeocontinent_name"},{depth:3,value:"server.geo.country_iso_code",id:"servergeocountry_iso_code"},{depth:3,value:"server.geo.country_name",id:"servergeocountry_name"},{depth:3,value:"server.geo.location",id:"servergeolocation"},{depth:3,value:"server.geo.name",id:"servergeoname"},{depth:3,value:"server.geo.postal_code",id:"servergeopostal_code"},{depth:3,value:"server.geo.region_iso_code",id:"servergeoregion_iso_code"},{depth:3,value:"server.geo.region_name",id:"servergeoregion_name"},{depth:3,value:"server.geo.timezone",id:"servergeotimezone"},{depth:3,value:"server.ip",id:"serverip"},{depth:3,value:"server.mac",id:"servermac"},{depth:3,value:"server.nat.ip",id:"servernatip"},{depth:3,value:"server.nat.port",id:"servernatport"},{depth:3,value:"server.packets",id:"serverpackets"},{depth:3,value:"server.port",id:"serverport"},{depth:3,value:"server.registered_domain",id:"serverregistered_domain"},{depth:3,value:"server.subdomain",id:"serversubdomain"},{depth:3,value:"server.top_level_domain",id:"servertop_level_domain"},{depth:3,value:"server.user.domain",id:"serveruserdomain"},{depth:3,value:"server.user.email",id:"serveruseremail"},{depth:3,value:"server.user.full_name",id:"serveruserfull_name"},{depth:3,value:"server.user.full_name.text",id:"serveruserfull_nametext"},{depth:3,value:"server.user.group.domain",id:"serverusergroupdomain"},{depth:3,value:"server.user.group.id",id:"serverusergroupid"},{depth:3,value:"server.user.group.name",id:"serverusergroupname"},{depth:3,value:"server.user.hash",id:"serveruserhash"},{depth:3,value:"server.user.id",id:"serveruserid"},{depth:3,value:"server.user.name",id:"serverusername"},{depth:3,value:"server.user.name.text",id:"serverusernametext"},{depth:3,value:"server.user.roles",id:"serveruserroles"}];function o(e){let r=Object.assign({h1:"h1",blockquote:"blockquote",p:"p",h2:"h2",h3:"h3",table:"table",thead:"thead",tr:"tr",th:"th",tbody:"tbody",td:"td",a:"a",code:"code",strong:"strong"},(0,i.a)(),e.components);return(0,n.jsxs)(n.Fragment,{children:[(0,n.jsx)(c.Z,{structuredData:[{"@context":"https://schema.org","@type":"TechArticle",headline:"Server Fields (38 fields) | Logit.io ECS Server Field Set Reference",description:"Complete reference for server fields in Logit.io ECS Schema (Elastic Common Schema). Includes 38 fields (19 core, 19 extended). Fields about the server ...",author:{"@type":"Organization",name:"Logit.io",url:"https://logit.io"},publisher:{"@type":"Organization",name:"Logit.io",logo:{"@type":"ImageObject",url:"https://logit.io/docs/logit-icon-125x125.png"}},datePublished:"2026-09-08T13:39:53.421Z",dateModified:"2026-09-08T13:39:53.421Z",mainEntityOfPage:{"@type":"WebPage","@id":"https://logit.io/docs/ecs-field-reference/server"},about:{"@type":"Thing",name:"Elastic Common Schema (ECS)",description:"Open-source specification for field names and data types"}}],breadcrumbData:{"@context":"https://schema.org","@type":"BreadcrumbList",itemListElement:[{"@type":"ListItem",position:1,name:"Documentation",item:"https://logit.io/docs/"},{"@type":"ListItem",position:2,name:"ECS Field Reference",item:"https://logit.io/docs/ecs-field-reference/"},{"@type":"ListItem",position:3,name:"Server",item:"https://logit.io/docs/ecs-field-reference/8.17/server"}]},productVersion:"8.17",productName:"Logit.io ECS Schema",websiteArea:"documentation",isLatestVersion:!1}),"\n",(0,n.jsx)(t.Z,{id:"version-selector-server",versions:["9.0","8.17","1.12"],currentVersion:"8.17",fieldSetName:"server",isLatest:!1}),"\n",(0,n.jsx)(r.h1,{children:"Server"}),"\n",(0,n.jsxs)(r.blockquote,{children:["\n",(0,n.jsx)(r.p,{children:"Fields about the server side of a network connection, used with client."}),"\n"]}),"\n",(0,n.jsx)(r.h2,{id:"fields",children:"Fields"}),"\n",(0,n.jsx)(r.h3,{id:"field-summary",children:"Field Summary"}),"\n",(0,n.jsxs)(r.table,{children:[(0,n.jsx)(r.thead,{children:(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.th,{children:"Field"}),(0,n.jsx)(r.th,{children:"Type"}),(0,n.jsx)(r.th,{children:"Level"}),(0,n.jsx)(r.th,{children:"Description"})]})}),(0,n.jsxs)(r.tbody,{children:[(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-address",children:(0,n.jsx)(r.code,{children:"server.address"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Server network address."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-as-number",children:(0,n.jsx)(r.code,{children:"server.as.number"})})}),(0,n.jsx)(r.td,{children:"long"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Unique number allocated to the autonomous system."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-as-organization-name",children:(0,n.jsx)(r.code,{children:"server.as.organization.name"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Organization name."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-as-organization-name-text",children:(0,n.jsx)(r.code,{children:"server.as.organization.name.text"})})}),(0,n.jsx)(r.td,{children:"match_only_text"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Organization name."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-bytes",children:(0,n.jsx)(r.code,{children:"server.bytes"})})}),(0,n.jsx)(r.td,{children:"long"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Bytes sent from the server to the client."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-domain",children:(0,n.jsx)(r.code,{children:"server.domain"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"The domain name of the server."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-city-name",children:(0,n.jsx)(r.code,{children:"server.geo.city_name"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"City name."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-continent-code",children:(0,n.jsx)(r.code,{children:"server.geo.continent_code"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Continent code."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-continent-name",children:(0,n.jsx)(r.code,{children:"server.geo.continent_name"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Name of the continent."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-country-iso-code",children:(0,n.jsx)(r.code,{children:"server.geo.country_iso_code"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Country ISO code."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-country-name",children:(0,n.jsx)(r.code,{children:"server.geo.country_name"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Country name."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-location",children:(0,n.jsx)(r.code,{children:"server.geo.location"})})}),(0,n.jsx)(r.td,{children:"geo_point"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Longitude and latitude."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-name",children:(0,n.jsx)(r.code,{children:"server.geo.name"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"User-defined description of a location."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-postal-code",children:(0,n.jsx)(r.code,{children:"server.geo.postal_code"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Postal code."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-region-iso-code",children:(0,n.jsx)(r.code,{children:"server.geo.region_iso_code"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Region ISO code."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-region-name",children:(0,n.jsx)(r.code,{children:"server.geo.region_name"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Region name."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-geo-timezone",children:(0,n.jsx)(r.code,{children:"server.geo.timezone"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Time zone."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-ip",children:(0,n.jsx)(r.code,{children:"server.ip"})})}),(0,n.jsx)(r.td,{children:"ip"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"IP address of the server."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-mac",children:(0,n.jsx)(r.code,{children:"server.mac"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"MAC address of the server."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-nat-ip",children:(0,n.jsx)(r.code,{children:"server.nat.ip"})})}),(0,n.jsx)(r.td,{children:"ip"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Server NAT ip"})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-nat-port",children:(0,n.jsx)(r.code,{children:"server.nat.port"})})}),(0,n.jsx)(r.td,{children:"long"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Server NAT port"})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-packets",children:(0,n.jsx)(r.code,{children:"server.packets"})})}),(0,n.jsx)(r.td,{children:"long"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Packets sent from the server to the client."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-port",children:(0,n.jsx)(r.code,{children:"server.port"})})}),(0,n.jsx)(r.td,{children:"long"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Port of the server."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-registered-domain",children:(0,n.jsx)(r.code,{children:"server.registered_domain"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"The highest registered server domain, stripped of the subdomain."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-subdomain",children:(0,n.jsx)(r.code,{children:"server.subdomain"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"The subdomain of the domain."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-top-level-domain",children:(0,n.jsx)(r.code,{children:"server.top_level_domain"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"The effective top level domain (com, org, net, co.uk)."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-domain",children:(0,n.jsx)(r.code,{children:"server.user.domain"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Name of the directory the user is a member of."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-email",children:(0,n.jsx)(r.code,{children:"server.user.email"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"User email address."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-full-name",children:(0,n.jsx)(r.code,{children:"server.user.full_name"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"User's full name, if available."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-full-name-text",children:(0,n.jsx)(r.code,{children:"server.user.full_name.text"})})}),(0,n.jsx)(r.td,{children:"match_only_text"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"User's full name, if available."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-group-domain",children:(0,n.jsx)(r.code,{children:"server.user.group.domain"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Name of the directory the group is a member of."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-group-id",children:(0,n.jsx)(r.code,{children:"server.user.group.id"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Unique identifier for the group on the system/platform."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-group-name",children:(0,n.jsx)(r.code,{children:"server.user.group.name"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Name of the group."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-hash",children:(0,n.jsx)(r.code,{children:"server.user.hash"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Unique user hash to correlate information for a user in anonymized form."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-id",children:(0,n.jsx)(r.code,{children:"server.user.id"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Unique identifier of the user."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-name",children:(0,n.jsx)(r.code,{children:"server.user.name"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Short name or login of the user."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-name-text",children:(0,n.jsx)(r.code,{children:"se

1rver.user.name.text"})})}),(0,n.jsx)(r.td,{children:"match_only_text"}),(0,n.jsx)(r.td,{children:(0,n.jsx)(r.strong,{children:"Core"})}),(0,n.jsx)(r.td,{children:"Short name or login of the user."})]}),(0,n.jsxs)(r.tr,{children:[(0,n.jsx)(r.td,{children:(0,n.jsx)(r.a,{href:"#server-user-roles",children:(0,n.jsx)(r.code,{children:"server.user.roles"})})}),(0,n.jsx)(r.td,{children:"keyword"}),(0,n.jsx)(r.td,{children:"Extended"}),(0,n.jsx)(r.td,{children:"Array of user roles at the time of the event."})]})]})]}),"\n",(0,n.jsx)(r.h2,{id:"field-details",children:"Field Details"}),"\n",(0,n.jsx)("a",{id:"server-address","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serveraddress",children:(0,n.jsx)(r.code,{children:"server.address"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Server network address."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-as-number","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverasnumber",children:(0,n.jsx)(r.code,{children:"server.as.number"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"long"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Unique number allocated to the autonomous system."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"15169"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-as-organization-name","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverasorganizationname",children:(0,n.jsx)(r.code,{children:"server.as.organization.name"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Organization name."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"Google LLC"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-as-organization-name-text","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverasorganizationnametext",children:(0,n.jsx)(r.code,{children:"server.as.organization.name.text"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"match_only_text"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Organization name."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"Google LLC"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-bytes","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverbytes",children:(0,n.jsx)(r.code,{children:"server.bytes"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"long"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Bytes sent from the server to the client."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"184"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-domain","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverdomain",children:(0,n.jsx)(r.code,{children:"server.domain"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," The domain name of the server."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"foo.example.com"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-city-name","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeocity_name",children:(0,n.jsx)(r.code,{children:"server.geo.city_name"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," City name."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"Montreal"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-continent-code","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeocontinent_code",children:(0,n.jsx)(r.code,{children:"server.geo.continent_code"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Continent code."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"NA"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-continent-name","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeocontinent_name",children:(0,n.jsx)(r.code,{children:"server.geo.continent_name"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Name of the continent."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"North America"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-country-iso-code","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeocountry_iso_code",children:(0,n.jsx)(r.code,{children:"server.geo.country_iso_code"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Country ISO code."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"CA"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-country-name","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeocountry_name",children:(0,n.jsx)(r.code,{children:"server.geo.country_name"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Country name."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"Canada"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-location","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeolocation",children:(0,n.jsx)(r.code,{children:"server.geo.location"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"geo_point"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Longitude and latitude."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:'{ "lon": -73.614830, "lat": 45.505918 }'})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-name","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeoname",children:(0,n.jsx)(r.code,{children:"server.geo.name"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," User-defined description of a location."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"boston-dc"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-postal-code","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeopostal_code",children:(0,n.jsx)(r.code,{children:"server.geo.postal_code"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Postal code."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"94040"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-region-iso-code","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeoregion_iso_code",children:(0,n.jsx)(r.code,{children:"server.geo.region_iso_code"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Region ISO code."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"CA-QC"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-region-name","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeoregion_name",children:(0,n.jsx)(r.code,{children:"server.geo.region_name"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Region name."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"Quebec"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-geo-timezone","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servergeotimezone",children:(0,n.jsx)(r.code,{children:"server.geo.timezone"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Time zone."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"America/Argentina/Buenos_Aires"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-ip","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverip",children:(0,n.jsx)(r.code,{children:"server.ip"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"ip"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," IP address of the server."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-mac","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servermac",children:(0,n.jsx)(r.code,{children:"server.mac"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," MAC address of the server."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"}

1)," ",(0,n.jsx)(r.code,{children:"00-00-5E-00-53-23"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-nat-ip","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servernatip",children:(0,n.jsx)(r.code,{children:"server.nat.ip"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"ip"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Server NAT ip"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-nat-port","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servernatport",children:(0,n.jsx)(r.code,{children:"server.nat.port"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"long"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Server NAT port"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-packets","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverpackets",children:(0,n.jsx)(r.code,{children:"server.packets"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"long"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Packets sent from the server to the client."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"12"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-port","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverport",children:(0,n.jsx)(r.code,{children:"server.port"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"long"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Port of the server."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-registered-domain","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverregistered_domain",children:(0,n.jsx)(r.code,{children:"server.registered_domain"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," The highest registered server domain, stripped of the subdomain."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"example.com"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-subdomain","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serversubdomain",children:(0,n.jsx)(r.code,{children:"server.subdomain"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," The subdomain of the domain."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"east"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-top-level-domain","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"servertop_level_domain",children:(0,n.jsx)(r.code,{children:"server.top_level_domain"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," The effective top level domain (com, org, net, co.uk)."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"co.uk"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-domain","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serveruserdomain",children:(0,n.jsx)(r.code,{children:"server.user.domain"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Name of the directory the user is a member of."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-email","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serveruseremail",children:(0,n.jsx)(r.code,{children:"server.user.email"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," User email address."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-full-name","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serveruserfull_name",children:(0,n.jsx)(r.code,{children:"server.user.full_name"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," User's full name, if available."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"Albert Einstein"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-full-name-text","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serveruserfull_nametext",children:(0,n.jsx)(r.code,{children:"server.user.full_name.text"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"match_only_text"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," User's full name, if available."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"Albert Einstein"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-group-domain","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverusergroupdomain",children:(0,n.jsx)(r.code,{children:"server.user.group.domain"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Name of the directory the group is a member of."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-group-id","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverusergroupid",children:(0,n.jsx)(r.code,{children:"server.user.group.id"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Unique identifier for the group on the system/platform."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-group-name","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverusergroupname",children:(0,n.jsx)(r.code,{children:"server.user.group.name"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Name of the group."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-hash","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serveruserhash",children:(0,n.jsx)(r.code,{children:"server.user.hash"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Unique user hash to correlate information for a user in anonymized form."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-id","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serveruserid",children:(0,n.jsx)(r.code,{children:"server.user.id"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Unique identifier of the user."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"S-1-5-21-202424912787-2692429404-2351956786-1000"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-name","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverusername",children:(0,n.jsx)(r.code,{children:"server.user.name"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Short name or login of the user."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"a.einstein"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-name-text","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serverusernametext",children:(0,n.jsx)(r.code,{children:"server.user.name.text"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"match_only_text"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," ",(0,n.jsx)(r.strong,{children:"Core"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Short name or login of the user."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:"a.einstein"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]}),"\n",(0,n.jsx)("a",{id:"server-user-roles","aria-hidden":"true"}),"\n",(0,n.jsx)(r.h3,{id:"serveruserroles",children:(0,n.jsx)(r.code,{children:"server.user.roles"})}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Type:"})," ",(0,n.jsx)(r.code,{children:"keyword"})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Level:"})," Extended"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Description:"})," Array of user roles at the time of the event."]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Example:"})," ",(0,n.jsx)(r.code,{children:'["kibana_admin", "reporting_user"]'})]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Normalization:"})," array"]}),"\n",(0,n.jsxs)(r.p,{children:[(0,n.jsx)(r.strong,{children:"Indexed:"})," true"]})]})}r.default=(0,d.j)({MDXContent:function(e={}){let{wrapper:r}=Object.assign({},(0,i.a)(),e.components);return r?(0,n.jsx)(r,{...e,children:(0,n.jsx)(o,{...e})}):o(e)},pageOpts:{filePath:"src/pages/ecs-field-reference/8.17/server.mdx",route:"/ecs-field-reference/8.17/server",frontMatter:{metaTitle:"Server Fields (38 fields) | Logit.io ECS Server Field Set Reference",description:"Complete reference for server fields in Logit.io ECS Schema (Elastic Common Schema). Includes 38 fields (19 core, 19 extended). Fields about the server ...",productVersion:"8.17",productName:"Logit.io ECS Schema"},title:"Server",headings:l},pageNextRoute:"/ecs-field-reference/8.17/server"})},34908:function(e,r,s){"use strict";s.d(r,{Z:function(){return d}});var n=s(67294);function d({structuredData:e=[],breadcrumbData:r,productVersion:s,productName:d,websiteArea:i,isLatestVersion:t=!0}){return(0,n.useEffect)(()=>{let n=document.head;if(Array.from(n.querySelectorAll('script[id^="ecs-structured-data-"]')).forEac

1h(e=>e.remove()),e.forEach((e,r)=>{let s=`ecs-structured-data-${r}`,d=document.createElement("script");d.id=s,d.type="application/ld+json",d.textContent=JSON.stringify(e),n.appendChild(d)}),r){let e="ecs-breadcrumb-data",s=document.getElementById(e);s&&s.remove();let d=document.createElement("script");d.id=e,d.type="application/ld+json",d.textContent=JSON.stringify(r),n.appendChild(d)}["product_version","product_name","website_area"].forEach(e=>{let r=document.getElementById(`ecs-meta-${e}`);r&&r.remove()});let t=(e,r,s=!1)=>{let d=`ecs-meta-${e}`,i=document.createElement("meta");i.id=d,s?i.setAttribute("property",e):i.setAttribute("name",e),i.setAttribute("content",r),n.appendChild(i)};return s&&t("product_version",s),d&&t("product_name",d),i&&t("website_area",i),()=>{Array.from(n.querySelectorAll('script[id^="ecs-structured-data-"]')).forEach(e=>e.remove());let e=document.getElementById("ecs-breadcrumb-data");e&&e.remove(),["product_version","product_name","website_area"].forEach(e=>{let r=document.getElementById(`ecs-meta-${e}`);r&&r.remove()})}},[e,r,s,d,i,t]),null}},67904:function(e,r,s){"use strict";s.d(r,{Z:function(){return h}});var n=s(85893),d=s(67294),i=s(11163),t=s(41664),c=s.n(t),l=s(94364),o=s.n(l);function h({id:e,versions:r,currentVersion:s,fieldSetName:t=null,isLatest:l=!1}){let h=(0,i.useRouter)();(0,d.useEffect)(()=>{let r=document.getElementById(e);if(r){let e=e=>{let r=e.target;h.push(r.value)};return r.addEventListener("change",e),()=>{r.removeEventListener("change",e)}}},[e,h]);let x="/ecs-field-reference",j=r[0],a=t?`${x}/${t}`:`${x}/`;return(0,n.jsxs)(n.Fragment,{children:[!l&&(0,n.jsxs)("div",{className:o().alertBanner,children:[(0,n.jsx)("strong",{children:"⚠️ Outdated Version:"})," You are viewing ECS version"," ",s,", which is outdated."," ",(0,n.jsxs)(c(),{href:a,className:o().alertLink,children:["View the latest version (",j,")"]})]}),(0,n.jsxs)("div",{className:o().selectorContainer,children:[(0,n.jsx)("strong",{className:o().selectorLabel,children:"ECS Version:"})," ",(0,n.jsx)("select",{id:e,defaultValue:l?t?`${x}/${t}`:`${x}/`:t?`${x}/${s}/${t}`:`${x}/${s}/`,className:o().selectElement,children:r.map((e,r)=>{let s=0===r,d=s?t?`${x}/${t}`:`${x}/`:t?`${x}/${e}/${t}`:`${x}/${e}/`,i=s?`${e} (Latest)`:e;return(0,n.jsx)("option",{value:d,children:i},e)})})]})]})}},94364:function(e){e.exports={alertBanner:"ecs-version-selector_alertBanner__LPiH_",alertLink:"ecs-version-selector_alertLink__wQ26d",selectorContainer:"ecs-version-selector_selectorContainer__ZdR0e",selectorLabel:"ecs-version-selector_selectorLabel__7SICs",selectElement:"ecs-version-selector_selectElement__xtog5"}}},function(e){e.O(0,[31379,92888,49774,40179],function(){return e(e.s=44428)}),_N_E=e.O()}]);