◇semconv.com

Attribute registry

as of v1.44.0

Every attribute the conventions define, plus the GenAI registry that was split out of them in v1.44.0, grouped by namespace. Deprecated entries stay in the registry, so a name that still resolves here may already have a successor — that is what the arrow means. For one topic in full, with its metrics, spans and the requirements that bind them, see domains.

android3 attributesApps, devices and users →

  • android.app.state
    DevelopmentThis attribute represents the state of the application.
  • android.os.api_level
    DevelopmentUniquely identifies the framework API revision offered by a version (os.version) of the Android operating system. More information can be found in the Android API levels documentat
  • android.state
    Deprecated→ android.app.stateDeprecated. Use android.app.state attribute instead.

app12 attributesApps, devices and users →

  • app.build_id
    DevelopmentUnique identifier for a particular build or compilation of the application.
  • app.crash.id
    DevelopmentA unique identifier representing an instance of an end user facing app crash.
  • app.installation.id
    DevelopmentA unique identifier representing the installation of an application on a specific device
  • app.jank.frame_count
    DevelopmentA number of frame renders that experienced jank.
  • app.jank.period
    DevelopmentThe time period, in seconds, for which this jank is being reported.
  • app.jank.threshold
    DevelopmentThe minimum rendering threshold for this jank, in seconds.
  • app.screen.coordinate.x
    DevelopmentThe x (horizontal) coordinate of a screen coordinate, in screen pixels.
  • app.screen.coordinate.y
    DevelopmentThe y (vertical) component of a screen coordinate, in screen pixels.
  • app.screen.id
    DevelopmentAn identifier that uniquely differentiates this screen from other screens in the same application.
  • app.screen.name
    DevelopmentThe name of an application screen.
  • app.widget.id
    DevelopmentAn identifier that uniquely differentiates this widget from other widgets in the same application.
  • app.widget.name
    DevelopmentThe name of an application widget.

artifact7 attributesCI/CD and source control →

  • artifact.attestation.filename
    DevelopmentThe provenance filename of the built attestation which directly relates to the build artifact filename. This filename SHOULD accompany the artifact at publish time. See the SLSA Re
  • artifact.attestation.hash
    DevelopmentThe full hash value (see glossary), of the built attestation. Some envelopes in the software attestation space also refer to this as the **digest**.
  • artifact.attestation.id
    DevelopmentThe ID of the build software attestation.
  • artifact.filename
    DevelopmentThe human readable filename of the artifact, typically generated during build and release processes. Often includes the package name and version in the filename.
  • artifact.hash
    DevelopmentThe full hash value (see glossary), often found in checksum.txt on a release of the artifact and used to verify package integrity.
  • artifact.purl
    DevelopmentThe Package URL of the package artifact provides a standard way to identify and locate the packaged artifact.
  • artifact.version
    DevelopmentThe version of the artifact.

aspnetcore23 attributesRuntimes and processes →

aws52 attributesCloud and serverless →

az2 attributesCloud and serverless →

azure10 attributesCloud and serverless →

browser11 attributesHTTP and the web →

cassandra6 attributesDatabases →

cicd16 attributesCI/CD and source control →

client2 attributesNetwork →

  • client.address
    StableClient address - domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
  • client.port
    StableClient port number.

cloud6 attributesCloud and serverless →

  • cloud.account.id
    DevelopmentThe cloud account ID the resource is assigned to.
  • cloud.availability_zone
    DevelopmentCloud regions often have multiple, isolated locations known as zones to increase availability. Availability zone represents the zone where the resource is running.
  • cloud.platform
    DevelopmentThe cloud platform in use.
  • cloud.provider
    DevelopmentName of the cloud provider.
  • cloud.region
    DevelopmentThe geographical region within a cloud provider. When associated with a resource, this attribute specifies the region where the resource operates. When calling services or APIs dep
  • cloud.resource_id
    DevelopmentCloud provider-specific native identifier of the monitored cloud resource (e.g. an ARN on AWS, a fully qualified resource ID on Azure, a full resource name on GCP)

cloudevents5 attributesMessaging →

cloudfoundry11 attributesCloud and serverless →

code10 attributesRuntimes and processes →

  • code.column
    Deprecated→ code.column.numberDeprecated, use code.column.number
  • code.column.number
    StableThe column number in code.file.path best representing the operation. It SHOULD point within the code unit named in code.function.name. This attribute MUST NOT be used on the Profil
  • code.file.path
    StableThe source code filename that identifies the code unit as uniquely as possible (preferably an absolute file path). This attribute MUST NOT be used on the Profile signal since the d
  • code.filepath
    Deprecated→ code.file.pathDeprecated, use code.file.path instead
  • code.function
    DeprecatedDeprecated, use code.function.name instead
  • code.function.name
    StableThe method or function fully-qualified name without arguments. The value should fit the natural representation of the language runtime, which is also likely the same used within co
  • code.line.number
    StableThe line number in code.file.path best representing the operation. It SHOULD point within the code unit named in code.function.name. This attribute MUST NOT be used on the Profile
  • code.lineno
    Deprecated→ code.line.numberDeprecated, use code.line.number instead
  • code.namespace
    DeprecatedDeprecated, namespace is now included into code.function.name
  • code.stacktrace
    StableA stacktrace as a string in the natural representation for the language runtime. The representation is identical to exception.stacktrace. This attribute MUST NOT be used on the Pro

container18 attributesKubernetes and containers →

cpu2 attributesHosts and hardware →

cpython1 attributesRuntimes and processes →

db48 attributesDatabases →

deployment5 attributesCI/CD and source control →

destination2 attributesNetwork →

  • destination.address
    DevelopmentDestination address - domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
  • destination.port
    DevelopmentDestination port number

device4 attributesApps, devices and users →

disk1 attributesHosts and hardware →

dns2 attributesNetwork →

dotnet1 attributesRuntimes and processes →

elasticsearch1 attributesDatabases →

  • elasticsearch.node.name
    DevelopmentRepresents the human-readable identifier of the node/instance to which a request was routed.

enduser4 attributesApps, devices and users →

  • enduser.id
    DevelopmentUnique identifier of an end user in the system. It maybe a username, email address, or other identifier.
  • enduser.pseudo.id
    DevelopmentPseudonymous identifier of an end user. This identifier should be a random value that is not directly linked or associated with the end user's actual identity.
  • enduser.role
    DeprecatedDeprecated, use user.roles instead.
  • enduser.scope
    DeprecatedDeprecated, no replacement at this time.

error2 attributesErrors and exceptions →

  • error.message
    DeprecatedA message providing more detail about an error in human-readable form.
  • error.type
    StableDescribes a class of error the operation ended with.

event1 attributesTelemetry and the SDK →

  • event.name
    DeprecatedIdentifies the class / type of event.

exception4 attributesErrors and exceptions →

  • exception.escaped
    DeprecatedIndicates that the exception is escaping the scope of the span.
  • exception.message
    StableThe exception message.
  • exception.stacktrace
    StableA stacktrace as a string in the natural representation for the language runtime. The representation is to be determined and documented by each language SIG.
  • exception.type
    StableThe type of the exception (its fully-qualified class name, if applicable). The dynamic type of the exception should be preferred over the static type in languages that support it.

faas16 attributesCloud and serverless →

  • faas.coldstart
    DevelopmentA boolean that is true if the serverless function is executed for the first time (aka cold-start).
  • faas.cron
    DevelopmentA string containing the schedule period as Cron Expression.
  • faas.document.collection
    DevelopmentThe name of the source on which the triggering operation was performed. For example, in Cloud Storage or S3 corresponds to the bucket name, and in Cosmos DB to the database name.
  • faas.document.name
    DevelopmentThe document name/table subjected to the operation. For example, in Cloud Storage or S3 is the name of the file, and in Cosmos DB the table name.
  • faas.document.operation
    DevelopmentDescribes the type of the operation that was performed on the data.
  • faas.document.time
    DevelopmentA string containing the time when the data was accessed in the ISO 8601 format expressed in UTC.
  • faas.instance
    DevelopmentThe execution environment ID as a string, that will be potentially reused for other invocations to the same function/function version.
  • faas.invocation_id
    DevelopmentThe invocation ID of the current function invocation.
  • faas.invoked_name
    DevelopmentThe name of the invoked function.
  • faas.invoked_provider
    DevelopmentThe cloud provider of the invoked function.
  • faas.invoked_region
    DevelopmentThe cloud region of the invoked function.
  • faas.max_memory
    DevelopmentThe amount of memory available to the serverless function converted to Bytes.
  • faas.name
    DevelopmentThe name of the single function that this runtime instance executes.
  • faas.time
    DevelopmentA string containing the function invocation time in the ISO 8601 format expressed in UTC.
  • faas.trigger
    DevelopmentType of the trigger which caused this function invocation.
  • faas.version
    DevelopmentThe immutable version of the function being executed.

feature_flag13 attributesApps, devices and users →

file21 attributesHosts and hardware →

  • file.accessed
    DevelopmentTime when the file was last accessed, in ISO 8601 format.
  • file.attributes
    DevelopmentArray of file attributes.
  • file.changed
    DevelopmentTime when the file attributes or metadata was last changed, in ISO 8601 format.
  • file.created
    DevelopmentTime when the file was created, in ISO 8601 format.
  • file.directory
    DevelopmentDirectory where the file is located. It should include the drive letter, when appropriate.
  • file.extension
    DevelopmentFile extension, excluding the leading dot.
  • file.fork_name
    DevelopmentName of the fork. A fork is additional data associated with a filesystem object.
  • file.group.id
    DevelopmentPrimary Group ID (GID) of the file.
  • file.group.name
    DevelopmentPrimary group name of the file.
  • file.inode
    DevelopmentInode representing the file in the filesystem.
  • file.lock.mechanism
    DevelopmentThe lock mechanism such as noted by POSIX
  • file.lock.mode
    DevelopmentMode of lock or operation such as documented by POSIX
  • file.lock.type
    DevelopmentThe lock type as represented by i.e. POSIX's l_type.
  • file.mode
    DevelopmentMode of the file in octal representation.
  • file.modified
    DevelopmentTime when the file content was last modified, in ISO 8601 format.
  • file.name
    DevelopmentName of the file including the extension, without the directory.
  • file.owner.id
    DevelopmentThe user ID (UID) or security identifier (SID) of the file owner.
  • file.owner.name
    DevelopmentUsername of the file owner.
  • file.path
    DevelopmentFull path to the file, including the filename. It should include the drive letter, when appropriate.
  • file.size
    DevelopmentFile size in bytes.
  • file.symbolic_link.target_path
    DevelopmentPath to the target of a symbolic link.

gcp27 attributesCloud and serverless →

gen_ai83 attributesGenerative AI →

geo7 attributesNetwork →

  • geo.continent.code
    DevelopmentTwo-letter code representing continent’s name.
  • geo.country.iso_code
    DevelopmentTwo-letter ISO Country Code (ISO 3166-1 alpha2).
  • geo.locality.name
    DevelopmentLocality name. Represents the name of a city, town, village, or similar populated place.
  • geo.location.lat
    DevelopmentLatitude of the geo location in WGS84.
  • geo.location.lon
    DevelopmentLongitude of the geo location in WGS84.
  • geo.postal_code
    DevelopmentPostal code associated with the location. Values appropriate for this field may also be known as a postcode or ZIP code and will vary widely from country to country.
  • geo.region.iso_code
    DevelopmentRegion ISO code (ISO 3166-2).

go4 attributesRuntimes and processes →

graphql3 attributesHTTP and the web →

heroku3 attributesCloud and serverless →

host15 attributesHosts and hardware →

  • host.arch
    DevelopmentThe CPU architecture the host system is running on.
  • host.cpu.cache.l2.size
    DevelopmentThe amount of level 2 memory cache available to the processor (in Bytes).
  • host.cpu.family
    DevelopmentFamily or generation of the CPU.
  • host.cpu.model.id
    DevelopmentModel identifier. It provides more granular information about the CPU, distinguishing it from other CPUs within the same family.
  • host.cpu.model.name
    DevelopmentModel designation of the processor.
  • host.cpu.stepping
    DevelopmentStepping or core revisions.
  • host.cpu.vendor.id
    DevelopmentProcessor manufacturer identifier. A maximum 12-character string.
  • host.id
    DevelopmentUnique host ID. For Cloud, this must be the instance_id assigned by the cloud provider. For non-containerized systems, this should be the machine-id. See the table below for the so
  • host.image.id
    DevelopmentVM image ID or host OS image ID. For Cloud, this value is from the provider.
  • host.image.name
    DevelopmentName of the VM image or OS install the host was instantiated from.
  • host.image.version
    DevelopmentThe version string of the VM image or host OS as defined in Version Attributes.
  • host.ip
    DevelopmentAvailable IP addresses of the host, excluding loopback interfaces.
  • host.mac
    DevelopmentAvailable MAC addresses of the host, excluding loopback interfaces.
  • host.name
    DevelopmentName of the host. On UNIX systems, it may contain what the hostname command returns, or the fully qualified hostname, or another name specified by the user.
  • host.type
    DevelopmentType of host. For Cloud, this must be the machine type.

http26 attributesHTTP and the web →

hw27 attributesHosts and hardware →

ios2 attributesApps, devices and users →

jsonrpc2 attributesRPC →

  • jsonrpc.protocol.version
    DevelopmentProtocol version, as specified in the jsonrpc property of the request and its corresponding response.
  • jsonrpc.request.id
    DevelopmentA string representation of the id property of the request and its corresponding response.

jvm8 attributesRuntimes and processes →

k8s90 attributesKubernetes and containers →

linux1 attributesHosts and hardware →

log7 attributesTelemetry and the SDK →

mainframe1 attributesHosts and hardware →

  • mainframe.lpar.name
    DevelopmentName of the logical partition that hosts a systems with a mainframe operating system.

mcp4 attributesGenerative AI →

message4 attributesMessaging →

messaging48 attributesMessaging →

net15 attributesNetwork →

network17 attributesNetwork →

nfs2 attributesHosts and hardware →

nodejs1 attributesRuntimes and processes →

oci1 attributesKubernetes and containers →

  • oci.manifest.digest
    DevelopmentThe digest of the OCI image manifest. For container images specifically is the digest by which the container image is known.

onc_rpc4 attributesRPC →

openai4 attributesGenerative AI →

openshift2 attributesKubernetes and containers →

opentracing1 attributesTelemetry and the SDK →

oracle5 attributesDatabases →

  • oracle.db.domain
    Release candidateThe database domain associated with the connection.
  • oracle.db.instance.name
    Release candidateThe instance name associated with the connection in an Oracle Real Application Clusters environment.
  • oracle.db.name
    Release candidateThe database name associated with the connection.
  • oracle.db.pdb
    Release candidateThe pluggable database (PDB) name associated with the connection.
  • oracle.db.service
    Release candidateThe service name currently associated with the database connection.

oracle_cloud1 attributesCloud and serverless →

  • oracle_cloud.realm
    DevelopmentThe OCI realm identifier that indicates the isolated partition in which the tenancy and its resources reside.

os5 attributesHosts and hardware →

  • os.build_id
    DevelopmentUnique identifier for a particular build or compilation of the operating system.
  • os.description
    DevelopmentHuman readable (not intended to be parsed) OS version information, like e.g. reported by ver or lsb_release -a commands.
  • os.name
    DevelopmentHuman readable operating system name.
  • os.type
    DevelopmentThe operating system type.
  • os.version
    DevelopmentThe version string of the operating system as defined in Version Attributes.

otel12 attributesTelemetry and the SDK →

peer1 attributesNetwork →

  • peer.service
    Deprecated→ service.peer.nameThe service.name of the remote service. SHOULD be equal to the actual service.name resource attribute of the remote service if any.

pool1 attributesDatabases →

pprof11 attributesRuntimes and processes →

  • pprof.location.is_folded
    DevelopmentProvides an indication that multiple symbols map to this location's address, for example due to identical code folding by the linker. In that case the line information represents o
  • pprof.mapping.has_filenames
    DevelopmentIndicates that there are filenames related to this mapping.
  • pprof.mapping.has_functions
    DevelopmentIndicates that there are functions related to this mapping.
  • pprof.mapping.has_inline_frames
    DevelopmentIndicates that there are inline frames related to this mapping.
  • pprof.mapping.has_line_numbers
    DevelopmentIndicates that there are line numbers related to this mapping.
  • pprof.profile.comment
    DevelopmentFree-form text associated with the profile. This field should not be used to store any machine-readable information, it is only for human-friendly content.
  • pprof.profile.doc_url
    DevelopmentDocumentation link for this profile type.
  • pprof.profile.drop_frames
    DevelopmentFrames with Function.function_name fully matching the regular expression will be dropped from the samples, along with their successors.
  • pprof.profile.keep_frames
    DevelopmentFrames with Function.function_name fully matching the regular expression will be kept, even if it matches drop_frames.
  • pprof.scope.default_sample_type
    DevelopmentRecords the pprof's default_sample_type in the original profile. Not set if the default sample type was missing.
  • pprof.scope.sample_type_order
    DevelopmentRecords the indexes of the sample types in the original profile.

process38 attributesRuntimes and processes →

profile1 attributesRuntimes and processes →

rpc22 attributesRPC →

security_rule8 attributesApps, devices and users →

  • security_rule.category
    DevelopmentA categorization value keyword used by the entity using the rule for detection of this event
  • security_rule.description
    DevelopmentThe description of the rule generating the event.
  • security_rule.license
    DevelopmentName of the license under which the rule used to generate this event is made available.
  • security_rule.name
    DevelopmentThe name of the rule or signature generating the event.
  • security_rule.reference
    DevelopmentReference URL to additional information about the rule used to generate this event.
  • security_rule.ruleset.name
    DevelopmentName of the ruleset, policy, group, or parent category in which the rule used to generate this event is a member.
  • security_rule.uuid
    DevelopmentA rule ID that is unique within the scope of a set or group of agents, observers, or other entities using the rule for detection of this event.
  • security_rule.version
    DevelopmentThe version / revision of the rule being used for analysis.

server2 attributesNetwork →

  • server.address
    StableServer domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
  • server.port
    StableServer port number.

service7 attributesTelemetry and the SDK →

  • service.criticality
    AlphaThe operational criticality of the service.
  • service.instance.id
    StableThe string ID of the service instance.
  • service.name
    StableLogical name of the service.
  • service.namespace
    StableA namespace for service.name.
  • service.peer.name
    DevelopmentLogical name of the service on the other side of the connection. SHOULD be equal to the actual service.name resource attribute of the remote service if any.
  • service.peer.namespace
    DevelopmentLogical namespace of the service on the other side of the connection. SHOULD be equal to the actual service.namespace resource attribute of the remote service if any.
  • service.version
    StableThe version string of the service component. The format is not defined by these conventions.

session2 attributesApps, devices and users →

signalr2 attributesRPC →

source2 attributesNetwork →

  • source.address
    DevelopmentSource address - domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
  • source.port
    DevelopmentSource port number

state1 attributesTelemetry and the SDK →

system17 attributesHosts and hardware →

telemetry5 attributesTelemetry and the SDK →

test4 attributesCI/CD and source control →

thread2 attributesRuntimes and processes →

  • thread.id
    DevelopmentCurrent "managed" thread ID (as opposed to OS thread ID).
  • thread.name
    DevelopmentCurrent thread name.

tls29 attributesNetwork →

  • tls.cipher
    DevelopmentString indicating the cipher used during the current connection.
  • tls.client.certificate
    DevelopmentPEM-encoded stand-alone certificate offered by the client. This is usually mutually-exclusive of client.certificate_chain since this value also exists in that list.
  • tls.client.certificate_chain
    DevelopmentArray of PEM-encoded certificates that make up the certificate chain offered by the client. This is usually mutually-exclusive of client.certificate since that value should be the
  • tls.client.hash.md5
    DevelopmentCertificate fingerprint using the MD5 digest of DER-encoded version of certificate offered by the client. For consistency with other hash values, this value should be formatted as
  • tls.client.hash.sha1
    DevelopmentCertificate fingerprint using the SHA1 digest of DER-encoded version of certificate offered by the client. For consistency with other hash values, this value should be formatted as
  • tls.client.hash.sha256
    DevelopmentCertificate fingerprint using the SHA256 digest of DER-encoded version of certificate offered by the client. For consistency with other hash values, this value should be formatted
  • tls.client.issuer
    DevelopmentDistinguished name of subject of the issuer of the x.509 certificate presented by the client.
  • tls.client.ja3
    DevelopmentA hash that identifies clients based on how they perform an SSL/TLS handshake.
  • tls.client.not_after
    DevelopmentDate/Time indicating when client certificate is no longer considered valid.
  • tls.client.not_before
    DevelopmentDate/Time indicating when client certificate is first considered valid.
  • tls.client.server_name
    Deprecated→ server.addressDeprecated, use server.address instead.
  • tls.client.subject
    DevelopmentDistinguished name of subject of the x.509 certificate presented by the client.
  • tls.client.supported_ciphers
    DevelopmentArray of ciphers offered by the client during the client hello.
  • tls.curve
    DevelopmentString indicating the curve used for the given cipher, when applicable
  • tls.established
    DevelopmentBoolean flag indicating if the TLS negotiation was successful and transitioned to an encrypted tunnel.
  • tls.next_protocol
    DevelopmentString indicating the protocol being tunneled. Per the values in the IANA registry, this string should be lower case.
  • tls.protocol.name
    DevelopmentNormalized lowercase protocol name parsed from original string of the negotiated SSL/TLS protocol version
  • tls.protocol.version
    DevelopmentNumeric part of the version parsed from the original string of the negotiated SSL/TLS protocol version
  • tls.resumed
    DevelopmentBoolean flag indicating if this TLS connection was resumed from an existing TLS negotiation.
  • tls.server.certificate
    DevelopmentPEM-encoded stand-alone certificate offered by the server. This is usually mutually-exclusive of server.certificate_chain since this value also exists in that list.
  • tls.server.certificate_chain
    DevelopmentArray of PEM-encoded certificates that make up the certificate chain offered by the server. This is usually mutually-exclusive of server.certificate since that value should be the
  • tls.server.hash.md5
    DevelopmentCertificate fingerprint using the MD5 digest of DER-encoded version of certificate offered by the server. For consistency with other hash values, this value should be formatted as
  • tls.server.hash.sha1
    DevelopmentCertificate fingerprint using the SHA1 digest of DER-encoded version of certificate offered by the server. For consistency with other hash values, this value should be formatted as
  • tls.server.hash.sha256
    DevelopmentCertificate fingerprint using the SHA256 digest of DER-encoded version of certificate offered by the server. For consistency with other hash values, this value should be formatted
  • tls.server.issuer
    DevelopmentDistinguished name of subject of the issuer of the x.509 certificate presented by the client.
  • tls.server.ja3s
    DevelopmentA hash that identifies servers based on how they perform an SSL/TLS handshake.
  • tls.server.not_after
    DevelopmentDate/Time indicating when server certificate is no longer considered valid.
  • tls.server.not_before
    DevelopmentDate/Time indicating when server certificate is first considered valid.
  • tls.server.subject
    DevelopmentDistinguished name of subject of the x.509 certificate presented by the server.

url13 attributesHTTP and the web →

  • url.domain
    DevelopmentDomain extracted from the url.full, such as "opentelemetry.io".
  • url.extension
    DevelopmentThe file extension extracted from the url.full, excluding the leading dot.
  • url.fragment
    StableThe URI fragment component
  • url.full
    StableAbsolute URL describing a network resource according to RFC3986
  • url.original
    DevelopmentUnmodified original URL as seen in the event source.
  • url.path
    StableThe URI path component
  • url.port
    DevelopmentPort extracted from the url.full
  • url.query
    StableThe URI query component
  • url.registered_domain
    DevelopmentThe highest registered URL domain, stripped of the subdomain.
  • url.scheme
    StableThe URI scheme component identifying the used protocol.
  • url.subdomain
    DevelopmentThe subdomain portion of a fully qualified domain name includes all of the names except the hostname under the registered_domain. In a partially qualified domain, or if the qualifi
  • url.template
    DevelopmentThe low-cardinality template of an absolute path reference.
  • url.top_level_domain
    DevelopmentThe effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is com.

user6 attributesApps, devices and users →

  • user.email
    DevelopmentUser email address.
  • user.full_name
    DevelopmentUser's full name
  • user.hash
    DevelopmentUnique user hash to correlate information for a user in anonymized form.
  • user.id
    DevelopmentUnique identifier of the user.
  • user.name
    DevelopmentShort name or login/username of the user.
  • user.roles
    DevelopmentArray of user roles at the time of the event.

user_agent6 attributesHTTP and the web →

  • user_agent.name
    DevelopmentName of the user-agent extracted from original. Usually refers to the browser's name.
  • user_agent.original
    StableValue of the HTTP User-Agent header sent by the client.
  • user_agent.os.name
    DevelopmentHuman readable operating system name.
  • user_agent.os.version
    DevelopmentThe version string of the operating system as defined in Version Attributes.
  • user_agent.synthetic.type
    DevelopmentSpecifies the category of synthetic traffic, such as tests or bots.
  • user_agent.version
    DevelopmentVersion of the user-agent extracted from original. Usually refers to the browser's version

v8js3 attributesRuntimes and processes →

vcs21 attributesCI/CD and source control →

webengine3 attributesHTTP and the web →

zos2 attributesHosts and hardware →

  • zos.smf.id
    DevelopmentThe System Management Facility (SMF) Identifier uniquely identified a z/OS system within a SYSPLEX or mainframe environment and is used for system and performance analysis.
  • zos.sysplex.name
    DevelopmentThe name of the SYSPLEX to which the z/OS system belongs too.