StatsEvent

JSON representation 
{
  "startTime": string,
  "windowStartTime": string,
  "lastSuccessfulUpload": string,
  "numBatchesDropped": integer,
  "numBatchesUploaded": integer,
  "bytesUploaded": string,
  "bytesBeforeCompression": string,
  "bytesAfterCompression": string,
  "numUploadRetries": integer,
  "collectorHostname": string,
  "collectorVersion": string,
  "bundleVersion": string,
  "containerVersion": string,
  "numBatchesResized": integer,
  "numInputDropped": integer,
  "compressionLevel": integer,
  "pcapStats": {
    object (PcapStats)
  },
  "lastFailedUpload": string,
  "lastAttemptedUpload": string,
  "lastFailedStatusCode": integer,
  "errorInfo": [
    {
      object (ErrorInfo)
    }
  ],
  "rusage": {
    object (RUsage)
  },
  "lastReceivedTimestamp": {
    string: string,
    ...
  },
  "localLoggingVerbosityLevel": integer,
  "remoteLoggingVerbosityLevel": integer,
  "logs": [
    string
  ],
  "numSplunkInputRestarts": integer,
  "maxSplunkLatencyMs": integer,
  "minSplunkLatencyMs": integer,
  "numSplunkQueryAttempts": integer,
  "numLogLinesDiscarded": integer,
  "lastSplunkInputRestart": string,
  "commandLineArgs": string,
  "batchBacklogSizeBytes": {
    string: string,
    ...
  },
  "aggregatedBatchStats": {
    object (LogEntryBatchMetrics)
  },
  "inputStats": [
    {
      object (InputStatsEvent)
    }
  ],
  "containerStats": {
    object (ContainerStats)
  },
  "os": string,
  "osVersion": string,
  "ingestionLatency": string,
  "uploadTryCount": integer,
  "configHash": string,
  "authConfigHash": string,
  "forwarderId": string,
  "semanticVersion": string,
  "forwarderIdPersisted": boolean,
  "autoUpdateEnabled": boolean
}
Fields
startTime

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
windowStartTime

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
lastSuccessfulUpload

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
numBatchesDropped
(deprecated)

integer (uint32 format)
numBatchesUploaded
(deprecated)

integer (uint32 format)
bytesUploaded
(deprecated)

string
bytesBeforeCompression

string
bytesAfterCompression

string
numUploadRetries

integer (uint32 format)
collectorHostname

string
collectorVersion

string
bundleVersion

string
containerVersion

string
numBatchesResized
(deprecated)

integer (uint32 format)
numInputDropped

integer (uint32 format)
compressionLevel

integer
pcapStats

object (PcapStats)
lastFailedUpload

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
lastAttemptedUpload

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
lastFailedStatusCode

integer (uint32 format)
errorInfo[]

object (ErrorInfo)
rusage

object (RUsage)
lastReceivedTimestamp

map (key: string, value: string (Timestamp format))

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.
localLoggingVerbosityLevel

integer
remoteLoggingVerbosityLevel

integer
logs[]

string
numSplunkInputRestarts

integer (uint32 format)
maxSplunkLatencyMs

integer (uint32 format)
minSplunkLatencyMs

integer (uint32 format)
numSplunkQueryAttempts

integer (uint32 format)
numLogLinesDiscarded

integer (uint32 format)
lastSplunkInputRestart

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
commandLineArgs

string
batchBacklogSizeBytes
(deprecated)

map (key: string, value: string)

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.
aggregatedBatchStats

object (LogEntryBatchMetrics)
inputStats[]

object (InputStatsEvent)
containerStats

object (ContainerStats)
os

string
osVersion

string
ingestionLatency

string (int64 format)
uploadTryCount

integer
configHash

string
authConfigHash

string
forwarderId

string (bytes format)

A base64-encoded string.
semanticVersion

string
forwarderIdPersisted

boolean
autoUpdateEnabled

boolean

PcapStats

JSON representation 
{
  "packetsReceived": string,
  "noRoomDropped": string,
  "interfaceDropped": string
}
Fields
packetsReceived

string
noRoomDropped

string
interfaceDropped

string

ErrorInfo

JSON representation 
{
  "statusCode": integer,
  "count": integer
}
Fields
statusCode

integer (uint32 format)
count

integer (uint32 format)

RUsage

JSON representation 
{
  "utime": string,
  "stime": string,
  "maxrss": string,
  "ixrss": string,
  "idrss": string,
  "isrss": string,
  "minflt": string,
  "majflt": string,
  "nswap": string,
  "inblock": string,
  "oublock": string,
  "msgsnd": string,
  "msgrcv": string,
  "nsignals": string,
  "nvcsw": string,
  "nivcsw": string
}
Fields
utime

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
stime

string (Timestamp format)

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
maxrss

string (int64 format)
ixrss

string (int64 format)
idrss

string (int64 format)
isrss

string (int64 format)
minflt

string (int64 format)
majflt

string (int64 format)
nswap

string (int64 format)
inblock

string (int64 format)
oublock

string (int64 format)
msgsnd

string (int64 format)
msgrcv

string (int64 format)
nsignals

string (int64 format)
nvcsw

string (int64 format)
nivcsw

string (int64 format)

LogEntryBatchMetrics

JSON representation 
{
  "sizeOfBatchesBytes": string,
  "numLogs": string,
  "numBatches": string
}
Fields
sizeOfBatchesBytes

string
numLogs

string
numBatches

string

InputStatsEvent

JSON representation 
{
  "id": string,
  "logType": string,
  "inputType": string,
  "uploaded": {
    object (LogEntryBatchMetrics)
  },
  "backlog": {
    object (LogEntryBatchMetrics)
  },
  "backlogDropped": {
    object (LogEntryBatchMetrics)
  },
  "regexFilterDropped": {
    string: {
      object (LogEntryBatchMetrics)
    },
    ...
  },
  "outputStats": {
    string: {
      object (OutputStatsEvent)
    },
    ...
  },
  "bufferStats": {
    object (BufferStats)
  },
  "bytesCompressed": string,
  "bytesUncompressed": string
}
Fields
id

string
logType

string
inputType

string
uploaded

object (LogEntryBatchMetrics)
backlog

object (LogEntryBatchMetrics)
backlogDropped

object (LogEntryBatchMetrics)
regexFilterDropped

map (key: string, value: object (LogEntryBatchMetrics))

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.
outputStats

map (key: string, value: object (OutputStatsEvent))

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.
bufferStats

object (BufferStats)
bytesCompressed

string (int64 format)
bytesUncompressed

string (int64 format)

OutputStatsEvent

JSON representation 
{
  "name": string,
  "outputType": string,
  "uploaded": {
    object (LogEntryBatchMetrics)
  },
  "backlog": {
    object (LogEntryBatchMetrics)
  },
  "backlogDropped": {
    object (LogEntryBatchMetrics)
  },
  "bufferStats": {
    object (BufferStats)
  }
}
Fields
name

string
outputType

string
uploaded

object (LogEntryBatchMetrics)
backlog

object (LogEntryBatchMetrics)
backlogDropped

object (LogEntryBatchMetrics)
bufferStats

object (BufferStats)

BufferStats

JSON representation 
{
  "bufferType": string,
  "currentBufferUsedBytes": string,
  "bufferCeiling": string,
  "transmissionThreads": string,
  "lockWaitLatency": string
}
Fields
bufferType

string
currentBufferUsedBytes

string (int64 format)
bufferCeiling

string (int64 format)
transmissionThreads

string (int64 format)
lockWaitLatency

string (int64 format)

ContainerStats

JSON representation 
{
  "processes": [
    {
      object (ContainerProcess)
    }
  ],
  "memStats": {
    object (MemStats)
  },
  "diskStats": [
    {
      object (DiskStats)
    }
  ],
  "cpuStats": {
    object (CpuStats)
  },
  "networkStats": [
    {
      object (NetworkStats)
    }
  ],
  "loadAvg": {
    object (LoadAvg)
  },
  "uptime": string
}
Fields
processes[]

object (ContainerProcess)
memStats

object (MemStats)
diskStats[]

object (DiskStats)
cpuStats

object (CpuStats)
networkStats[]

object (NetworkStats)
loadAvg

object (LoadAvg)
uptime

string (int64 format)

ContainerProcess

JSON representation 
{
  "pid": integer,
  "ppid": integer,
  "executable": string
}
Fields
pid

integer
ppid

integer
executable

string

MemStats

JSON representation 
{
  "memTotal": string,
  "memUsed": string
}
Fields
memTotal

string (int64 format)
memUsed

string (int64 format)

DiskStats

JSON representation 
{
  "name": string,
  "diskTotal": string,
  "diskUsed": string
}
Fields
name

string
diskTotal

string (int64 format)
diskUsed

string (int64 format)

CpuStats

JSON representation 
{
  "user": string,
  "nice": string,
  "system": string,
  "idle": string,
  "iowait": string,
  "irq": string,
  "softIrq": string,
  "steal": string,
  "guest": string,
  "guestNice": string,
  "total": string,
  "cpuCount": integer,
  "statCount": integer
}
Fields
user

string (int64 format)
nice

string (int64 format)
system

string (int64 format)
idle

string (int64 format)
iowait

string (int64 format)
irq

string (int64 format)
softIrq

string (int64 format)
steal

string (int64 format)
guest

string (int64 format)
guestNice

string (int64 format)
total

string (int64 format)
cpuCount

integer
statCount

integer

NetworkStats

JSON representation 
{
  "name": string,
  "rxBytes": string,
  "txBytes": string
}
Fields
name

string
rxBytes

string (int64 format)
txBytes

string (int64 format)

LoadAvg

JSON representation 
{
  "loadAvg1": number,
  "loadAvg5": number,
  "loadAvg15": number
}
Fields
loadAvg1

number
loadAvg5

number
loadAvg15

number