StatsEvent

JSON representation 
{
  "start_time": string,
  "window_start_time": string,
  "last_successful_upload": string,
  "num_batches_dropped": integer,
  "num_batches_uploaded": integer,
  "bytes_uploaded": string,
  "bytes_before_compression": string,
  "bytes_after_compression": string,
  "num_upload_retries": integer,
  "collector_hostname": string,
  "collector_version": string,
  "bundle_version": string,
  "container_version": string,
  "num_batches_resized": integer,
  "num_input_dropped": integer,
  "compression_level": integer,
  "pcap_stats": {
    object (PcapStats)
  },
  "last_failed_upload": string,
  "last_attempted_upload": string,
  "last_failed_status_code": integer,
  "error_info": [
    {
      object (ErrorInfo)
    }
  ],
  "rusage": {
    object (RUsage)
  },
  "last_received_timestamp": {
    string: string,
    ...
  },
  "local_logging_verbosity_level": integer,
  "remote_logging_verbosity_level": integer,
  "logs": [
    string
  ],
  "num_splunk_input_restarts": integer,
  "max_splunk_latency_ms": integer,
  "min_splunk_latency_ms": integer,
  "num_splunk_query_attempts": integer,
  "num_log_lines_discarded": integer,
  "last_splunk_input_restart": string,
  "command_line_args": string,
  "batch_backlog_size_bytes": {
    string: string,
    ...
  },
  "aggregated_batch_stats": {
    object (LogEntryBatchMetrics)
  },
  "input_stats": [
    {
      object (InputStatsEvent)
    }
  ],
  "container_stats": {
    object (ContainerStats)
  },
  "os": string,
  "os_version": string,
  "ingestion_latency": string,
  "upload_try_count": integer,
  "config_hash": string,
  "auth_config_hash": string,
  "forwarder_id": string,
  "semantic_version": string,
  "forwarder_id_persisted": boolean,
  "auto_update_enabled": boolean
}
Fields
start_time

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted.Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
window_start_time

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted.Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
last_successful_upload

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted.Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
num_batches_dropped
(deprecated)

integer (uint32 format)
num_batches_uploaded
(deprecated)

integer (uint32 format)
bytes_uploaded
(deprecated)

string
bytes_before_compression

string
bytes_after_compression

string
num_upload_retries

integer (uint32 format)
collector_hostname

string
collector_version

string
bundle_version

string
container_version

string
num_batches_resized
(deprecated)

integer (uint32 format)
num_input_dropped

integer (uint32 format)
compression_level

integer
pcap_stats

object (PcapStats)
last_failed_upload

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted.Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
last_attempted_upload

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted.Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
last_failed_status_code

integer (uint32 format)
error_info[]

object (ErrorInfo)
rusage

object (RUsage)
last_received_timestamp

map (key: string, value: string (Timestamp format))

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.
local_logging_verbosity_level

integer
remote_logging_verbosity_level

integer
logs[]

string
num_splunk_input_restarts

integer (uint32 format)
max_splunk_latency_ms

integer (uint32 format)
min_splunk_latency_ms

integer (uint32 format)
num_splunk_query_attempts

integer (uint32 format)
num_log_lines_discarded

integer (uint32 format)
last_splunk_input_restart

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted.Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
command_line_args

string
batch_backlog_size_bytes
(deprecated)

map (key: string, value: string)

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.
aggregated_batch_stats

object (LogEntryBatchMetrics)
input_stats[]

object (InputStatsEvent)
container_stats

object (ContainerStats)
os

string
os_version

string
ingestion_latency

string (int64 format)
upload_try_count

integer
config_hash

string
auth_config_hash

string
forwarder_id

string (bytes format)

A base64-encoded string.
semantic_version

string
forwarder_id_persisted

boolean
auto_update_enabled

boolean

PcapStats

JSON representation 
{
  "packets_received": string,
  "no_room_dropped": string,
  "interface_dropped": string
}
Fields
packets_received

string
no_room_dropped

string
interface_dropped

string

ErrorInfo

JSON representation 
{
  "status_code": integer,
  "count": integer
}
Fields
status_code

integer (uint32 format)
count

integer (uint32 format)

RUsage

JSON representation 
{
  "utime": string,
  "stime": string,
  "maxrss": string,
  "ixrss": string,
  "idrss": string,
  "isrss": string,
  "minflt": string,
  "majflt": string,
  "nswap": string,
  "inblock": string,
  "oublock": string,
  "msgsnd": string,
  "msgrcv": string,
  "nsignals": string,
  "nvcsw": string,
  "nivcsw": string
}
Fields
utime

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted.Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
stime

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted.Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
maxrss

string (int64 format)
ixrss

string (int64 format)
idrss

string (int64 format)
isrss

string (int64 format)
minflt

string (int64 format)
majflt

string (int64 format)
nswap

string (int64 format)
inblock

string (int64 format)
oublock

string (int64 format)
msgsnd

string (int64 format)
msgrcv

string (int64 format)
nsignals

string (int64 format)
nvcsw

string (int64 format)
nivcsw

string (int64 format)

LogEntryBatchMetrics

JSON representation 
{
  "size_of_batches_bytes": string,
  "num_logs": string,
  "num_batches": string
}
Fields
size_of_batches_bytes

string
num_logs

string
num_batches

string

InputStatsEvent

JSON representation 
{
  "id": string,
  "log_type": string,
  "input_type": string,
  "uploaded": {
    object (LogEntryBatchMetrics)
  },
  "backlog": {
    object (LogEntryBatchMetrics)
  },
  "backlog_dropped": {
    object (LogEntryBatchMetrics)
  },
  "regex_filter_dropped": {
    string: {
      object (LogEntryBatchMetrics)
    },
    ...
  },
  "output_stats": {
    string: {
      object (OutputStatsEvent)
    },
    ...
  },
  "buffer_stats": {
    object (BufferStats)
  },
  "bytes_compressed": string,
  "bytes_uncompressed": string
}
Fields
id

string
log_type

string
input_type

string
uploaded

object (LogEntryBatchMetrics)
backlog

object (LogEntryBatchMetrics)
backlog_dropped

object (LogEntryBatchMetrics)
regex_filter_dropped

map (key: string, value: object (LogEntryBatchMetrics))

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.
output_stats

map (key: string, value: object (OutputStatsEvent))

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.
buffer_stats

object (BufferStats)
bytes_compressed

string (int64 format)
bytes_uncompressed

string (int64 format)

OutputStatsEvent

JSON representation 
{
  "name": string,
  "output_type": string,
  "uploaded": {
    object (LogEntryBatchMetrics)
  },
  "backlog": {
    object (LogEntryBatchMetrics)
  },
  "backlog_dropped": {
    object (LogEntryBatchMetrics)
  },
  "buffer_stats": {
    object (BufferStats)
  }
}
Fields
name

string
output_type

string
uploaded

object (LogEntryBatchMetrics)
backlog

object (LogEntryBatchMetrics)
backlog_dropped

object (LogEntryBatchMetrics)
buffer_stats

object (BufferStats)

BufferStats

JSON representation 
{
  "buffer_type": string,
  "current_buffer_used_bytes": string,
  "buffer_ceiling": string,
  "transmission_threads": string,
  "lock_wait_latency": string
}
Fields
buffer_type

string
current_buffer_used_bytes

string (int64 format)
buffer_ceiling

string (int64 format)
transmission_threads

string (int64 format)
lock_wait_latency

string (int64 format)

ContainerStats

JSON representation 
{
  "processes": [
    {
      object (ContainerProcess)
    }
  ],
  "mem_stats": {
    object (MemStats)
  },
  "disk_stats": [
    {
      object (DiskStats)
    }
  ],
  "cpu_stats": {
    object (CpuStats)
  },
  "network_stats": [
    {
      object (NetworkStats)
    }
  ],
  "load_avg": {
    object (LoadAvg)
  },
  "uptime": string
}
Fields
processes[]

object (ContainerProcess)
mem_stats

object (MemStats)
disk_stats[]

object (DiskStats)
cpu_stats

object (CpuStats)
network_stats[]

object (NetworkStats)
load_avg

object (LoadAvg)
uptime

string (int64 format)

ContainerProcess

JSON representation 
{
  "pid": integer,
  "ppid": integer,
  "executable": string
}
Fields
pid

integer
ppid

integer
executable

string

MemStats

JSON representation 
{
  "mem_total": string,
  "mem_used": string
}
Fields
mem_total

string (int64 format)
mem_used

string (int64 format)

DiskStats

JSON representation 
{
  "name": string,
  "disk_total": string,
  "disk_used": string
}
Fields
name

string
disk_total

string (int64 format)
disk_used

string (int64 format)

CpuStats

JSON representation 
{
  "user": string,
  "nice": string,
  "system": string,
  "idle": string,
  "iowait": string,
  "irq": string,
  "soft_irq": string,
  "steal": string,
  "guest": string,
  "guest_nice": string,
  "total": string,
  "cpu_count": integer,
  "stat_count": integer
}
Fields
user

string (int64 format)
nice

string (int64 format)
system

string (int64 format)
idle

string (int64 format)
iowait

string (int64 format)
irq

string (int64 format)
soft_irq

string (int64 format)
steal

string (int64 format)
guest

string (int64 format)
guest_nice

string (int64 format)
total

string (int64 format)
cpu_count

integer
stat_count

integer

NetworkStats

JSON representation 
{
  "name": string,
  "rx_bytes": string,
  "tx_bytes": string
}
Fields
name

string
rx_bytes

string (int64 format)
tx_bytes

string (int64 format)

LoadAvg

JSON representation 
{
  "load_avg1": number,
  "load_avg5": number,
  "load_avg15": number
}
Fields
load_avg1

number
load_avg5

number
load_avg15

number