Shared attributes

The attributes in the following table are common to all types of logs.

Key

Value

Example

time

Date and time in ISO-8601 format.

This is the main attribute for indexing in Elasticsearch.

2019-09-11T16:17:56.138+0200

client_ip

Client IP address.
If requests are passed through the Airlock Gateway (WAF), this attribute contains the Client IP address reported by the Gateway (WAF).

127.0.0.1

configuration_context

IAM configuration context

[DEFAULT]

environment

IAM environment

[COMMON]

host

Hostname where the log message originated.

iam.example.com

instance

IAM instance

auth

logger_name

Internal logger name, typically class name.

com.airlock.iam.login.app.misc.LoginServlet

log_id

Type of the log message (see above)

IAM-DETAIL

exception

Raw exception text

com.airlock.iam.login.app.misc.oauth2.OAuth2RequestHandlingException: Invalid OAuth 2.0 Request.

...

message

Free-form text
IAM-REPORTING messages never provide this attribute.

redirectToPage() - location: login

program

IAM module that issued the log message.

adminapp

priority

Log level in syslog format. Indicates the severity or importance of the individual log message.

info

req_id

Request ID
Airlock IAM will use the req_id of Airlock Gateway (WAF) if possible.

745875971973439261

sess_id

Session ID
Airlock IAM will use the sess_id of Airlock Gateway (WAF) if possible.

987378306886186762

thread

Thread name

https-jsse-nio-0.0.0.0-8443-exec-10

Example of a log message with shared attributes

{
  "time": "2019-09-11T16:17:56.138+0200",
  "host": "iam.example.com",
  "program": "adminapp",
  "log_id": "IAM-DETAIL",
  "priority": "info",
  "instance": "auth",
  "sess_id": "987378306886186762",
  "req_id": "745875971973439261",
  "configuration_context": "[DEFAULT]",
  "environment": "[COMMON]",
  "message": "redirectToPage() - location: login",
  "logger_name": "com.airlock.iam.login.app.misc.LoginServlet",
  "thread": "https-jsse-nio-0.0.0.0-8443-exec-10",
  "client_ip": "127.0.0.1"
}