# Is there a document that list the various fields of the elasticsearch log?

**URL:** <https://discuss.elastic.co/t/is-there-a-document-that-list-the-various-fields-of-the-elasticsearch-log/71153>\
**Category:** Elasticsearch\
**Created:** [January 10, 2017, 9:07pm UTC](https://discuss.elastic.co/t/is-there-a-document-that-list-the-various-fields-of-the-elasticsearch-log/71153 "2017-01-10T21:07:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pshroads](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@pshroads](https://discuss.elastic.co/u/pshroads)\
**Post date:** [January 10, 2017, 9:07pm UTC](https://discuss.elastic.co/t/is-there-a-document-that-list-the-various-fields-of-the-elasticsearch-log/71153/1 "2017-01-10T21:07:15Z")

</div>

Given a snippet of a log file like this I'm wondering if there is documentation for all the various possible values for the second and third columns (eg. INFO and plugins)

[2015-12-30 18:33:14,176][INFO][plugins] [[myserver.mycompany.com](http://myserver.mycompany.com)] loaded [analysis-icu, marvel, action-updatebyquery], sites [marvel]  
[2015-12-30 18:33:15,861][INFO][node] [[myserver.mycompany.com](http://myserver.mycompany.com)] initialized  
[2015-12-30 18:33:15,861][INFO][node] [[myserver.mycompany.com](http://myserver.mycompany.com)] starting ...  
[2015-12-30 18:33:16,024][INFO][transport] [[myserver.mycompany.com](http://myserver.mycompany.com)] bound\_address {inet[/170.20.52.10:9300]}, publish\_address {inet[/170.20.52.10:9300]}  
[2015-12-30 18:33:16,031][INFO][discovery] [[myserver.mycompany.com](http://myserver.mycompany.com)] p2-contact-data-new/bw7qpYdCTLidt4J5dHRMbg  
[2015-12-30 18:33:19,072][INFO][cluster.service] [[myserver.mycompany.com](http://myserver.mycompany.com)] new\_master [[myserver.mycompany.com](http://myserver.mycompany.com)][bw7qpYdCTLidt4J5dHRMbg][[myserver.mycompany.com](http://myserver.mycompany.com)][inet[/170.20.52.10:9300]]{max\_local\_storage\_nodes=1}, reason: zen-disco-join (elected\_as\_master)  
[2015-12-30 18:33:19,105][INFO][http] [[myserver.mycompany.com](http://myserver.mycompany.com)] bound\_address {inet[/170.20.52.10:9200]}, publish\_address {inet[/170.20.52.10:9200]}  
[2015-12-30 18:33:19,107][INFO][gateway] [[myserver.mycompany.com](http://myserver.mycompany.com)] recovered [0] indices into cluster\_state  
[2015-12-30 18:33:26,270][INFO][cluster.metadata] [[myserver.mycompany.com](http://myserver.mycompany.com)] [.marvel-2015.12.30] creating index, cause [auto(bulk api)], templates [marvel], shards [1]/[1], mappings [_default_, shard\_event, index\_event, index\_stats, node\_event, routing\_event, cluster\_event, cluster\_state, cluster\_stats, node\_stats, indices\_stats]  
[2015-12-30 18:33:26,538][INFO][cluster.metadata] [[myserver.mycompany.com](http://myserver.mycompany.com)] [.marvel-2015.12.30] update\_mapping [node\_stats] (dynamic)

---

<div class="post-metadata">

**Author:** ![nik9000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nik9000/32/44947_2.png) [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Post date:** [January 10, 2017, 9:22pm UTC](https://discuss.elastic.co/t/is-there-a-document-that-list-the-various-fields-of-the-elasticsearch-log/71153/2 "2017-01-10T21:22:03Z")

</div>

`[INFO]` and its ilk are log4j2 [levels](https://logging.apache.org/log4j/2.x/log4j-api/apidocs/org/apache/logging/log4j/Level.html).

`[plugins]`, `[node]`, etc are all package names of Elasticsearch's internals. You could get a list from the source but it wouldn't be stable.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 7, 2017, 9:22pm UTC](https://discuss.elastic.co/t/is-there-a-document-that-list-the-various-fields-of-the-elasticsearch-log/71153/3 "2017-02-07T21:22:04Z")

</div>

Closed on February 7, 2017, 9:22pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
