Add log.logger

docs/field-details.asciidoc

@@ -1842,6 +1842,17 @@ example: `err`
 
 // ===============================================================
 
+| log.logger
+| The name of the logger, usually the name of the class which initialized the logger.
+
+type: keyword
+
+example: `org.elasticsearch.bootstrap.Bootstrap`
+
+| core
+
+// ===============================================================
+
 | log.original
 | This is the original log message and contains the full log message before splitting it up in multiple parts.
 

generated/beats/fields.ecs.yml

@@ -1378,6 +1378,13 @@
 
         Some examples are `warn`, `error`, `i`.'
       example: err
+    - name: logger
+      level: core
+      type: keyword
+      ignore_above: 1024
+      description: The name of the logger, usually the name of the class which initialized
+        the logger.
+      example: org.elasticsearch.bootstrap.Bootstrap
     - name: original
       level: core
       type: keyword

generated/csv/fields.csv

@@ -179,6 +179,7 @@ http.response.bytes,long,extended,1437,1.1.0-dev
 http.response.status_code,long,extended,404,1.1.0-dev
 http.version,keyword,extended,1.1,1.1.0-dev
 log.level,keyword,core,err,1.1.0-dev
+log.logger,keyword,core,org.elasticsearch.bootstrap.Bootstrap,1.1.0-dev
 log.original,keyword,core,Sep 19 08:26:10 localhost My log,1.1.0-dev
 network.application,keyword,extended,aim,1.1.0-dev
 network.bytes,long,core,368,1.1.0-dev

generated/ecs/ecs_flat.yml

@@ -1966,6 +1966,17 @@ log.level:
   order: 0
   short: Log level of the log event.
   type: keyword
+log.logger:
+  description: The name of the logger, usually the name of the class which initialized
+    the logger.
+  example: org.elasticsearch.bootstrap.Bootstrap
+  flat_name: log.logger
+  ignore_above: 1024
+  level: core
+  name: logger
+  order: 2
+  short: Name of the logger.
+  type: keyword
 log.original:
   description: 'This is the original log message and contains the full log message
     before splitting it up in multiple parts.

generated/ecs/ecs_nested.yml

@@ -2255,6 +2255,17 @@ log:
       order: 0
       short: Log level of the log event.
       type: keyword
+    logger:
+      description: The name of the logger, usually the name of the class which initialized
+        the logger.
+      example: org.elasticsearch.bootstrap.Bootstrap
+      flat_name: log.logger
+      ignore_above: 1024
+      level: core
+      name: logger
+      order: 2
+      short: Name of the logger.
+      type: keyword
     original:
       description: 'This is the original log message and contains the full log message
         before splitting it up in multiple parts.

generated/elasticsearch/6/template.json

@@ -858,6 +858,10 @@
               "ignore_above": 1024, 
               "type": "keyword"
             }, 
+            "logger": {
+              "ignore_above": 1024, 
+              "type": "keyword"
+            }, 
             "original": {
               "doc_values": false, 
               "ignore_above": 1024, 

generated/elasticsearch/7/template.json

@@ -857,6 +857,10 @@
             "ignore_above": 1024, 
             "type": "keyword"
           }, 
+          "logger": {
+            "ignore_above": 1024, 
+            "type": "keyword"
+          }, 
           "original": {
             "doc_values": false, 
             "ignore_above": 1024, 

generated/legacy/template.json

@@ -555,6 +555,10 @@
               "ignore_above": 1024,
               "type": "keyword"
             },
+            "logger": {
+              "ignore_above": 1024,
+              "type": "keyword"
+            },
             "original": {
               "doc_values": false,
               "ignore_above": 1024,

schema.json

@@ -1326,6 +1326,16 @@
         "required": false, 
         "type": "keyword"
       }, 
+      "log.logger": {
+        "description": "The name of the logger, usually the name of the class which initialized the logger.", 
+        "example": "org.elasticsearch.bootstrap.Bootstrap", 
+        "footnote": "", 
+        "group": 2, 
+        "level": "core", 
+        "name": "log.logger", 
+        "required": false, 
+        "type": "keyword"
+      }, 
       "log.original": {
         "description": "This is the original log message and contains the full log message before splitting it up in multiple parts.\nIn contrast to the `message` field which can contain an extracted part of the log message, this field contains the original, full log message. It can have already some modifications applied like encoding or new lines removed to clean up the log message.\nThis field is not indexed and doc_values are disabled so it can't be queried but the value can be retrieved from `_source`.", 
         "example": "Sep 19 08:26:10 localhost My log", 

schemas/log.yml

@@ -35,3 +35,11 @@
 
         This field is not indexed and doc_values are disabled so it can't be
         queried but the value can be retrieved from `_source`.
+
+    - name: logger
+      level: core
+      type: keyword
+      example: org.elasticsearch.bootstrap.Bootstrap
+      short: Name of the logger.
+      description: >
+        The name of the logger, usually the name of the class which initialized the logger.