109.1. Fields
The following fields are used by core.
$raw_event(type: string)-
The data received from stream modules (im_file, im_tcp, etc.).
$EventReceivedTime(type: datetime)-
The time when the event is received. The value is not modified if the field already exists.
$SourceModuleName(type: string)-
The name of the module instance, for input modules. The value is not modified if the field already exists.
$SourceModuleType(type: string)-
The type of module instance (such as
im_file), for input modules. The value is not modified if the field already exists.