The Web section is designed for monitoring statistics on web requests.
- Number of unique servers/clients
- Number of successful/unsuccessful requests
- Dynamics of successful/unsuccessful requests
- Statistics by server response codes
- Dynamics by server response codes
- Dynamics of response volume
- Dynamics of the number of events by provider
- Top clients/servers by volume/number of requests
- Event statistics with details by clients
- Event statistics with details by servers
- Web: Overview
- Web: Client Profile
- Web: Server Profile
The section uses the data source fields described below. Alias used: sm_cs_web_indexes
.
Field Name | Value |
---|
event.kind | event |
event.category | email |
event.outcome | success | failure | unknown |
Field Name | Value |
---|
http.request.method | Request method. |
http.response.status_code | Server response code. |
http.response.body.bytes | Server response size in bytes. |
Field Name | Value |
---|
user.name | User specified in the request. |
Source of the request.
Field Name | Value |
---|
source.address | Source address of the request (name or IP address). |
source.ip | IP address of the request source. |
Destination server of the request.
Field Name | Value |
---|
destination.address | Address of the requested server (name or IP address). |
destination.ip | IP address of the requested server. |
destination.domain | Name (hostname or FQDN) of the requested server. |
Field Name | Value |
---|
url.original | Original address of the requested URL. |
url.path | Path of the requested URL. |
Field Name | Value |
---|
event.original | Original event text. |
user_agent.name | Name of the user's client software. |
user_agent.original | Original string with user's client software data. |
user_agent.os.name | Name of the OS of the device with the client software. |
Below is a table of dictionaries used by the section.
Name | Fields | Description |
---|
sm_cs_web_server_group_lookup | destination.address
server_group.name | Dictionary of web server groups. |