GitLab

Required fields are in bold.

GitLab.API

GitLab log for API requests received from GitLab. NOTE: We are using the latest version of GitLab API logs. Some fields differ from the official documentation Reference: https://docs.gitlab.com/ee/administration/logs.html#api_jsonlog

Column

Type

Description

time

timestamp

The request timestamp

severity

string

The log level

duration_s

float

The time spent serving the request (in seconds)

db_duration_s

float

The time spent quering the database (in seconds)

view_duration_s

float

The time spent rendering the view for the Rails controller (in seconds)

status

smallint

The HTTP response status code

method

string

The HTTP method of the request

path

string

The URL path for the request

params

[{ "key":string, "value":string }]

The URL query parameters

host

string

Hostname serving the request

ua

string

User-Agent HTTP header

route

string

Rails route for the API endpoint

remote_ip

string

The remote IP address of the HTTP request

user_id

bigint

The user id of the request

username

string

The username of the request

gitaly_calls

bigint

Total number of calls made to Gitaly

gitaly_duration_s

float

Total time taken by Gitaly calls

redis_calls

bigint

Total number of calls made to Redis

redis_duration_s

float

Total time to retrieve data from Redis

correlation_id

string

Request unique id across logs

queue_duration_s

float

Total time that the request was queued inside GitLab Workhorse

meta.user

string

User that invoked the request

meta.project

string

Project associated with the request

meta.root_namespace

string

Root namespace

meta.caller_id

string

Caller ID

p_log_type

string

Panther added field with type of log

p_row_id

string

Panther added field with unique id (within table)

p_event_time

timestamp

Panther added standardize event time (UTC)

p_parse_time

timestamp

Panther added standardize log parse time (UTC)

p_any_ip_addresses

[string]

Panther added field with collection of ip addresses associated with the row

p_any_domain_names

[string]

Panther added field with collection of domain names associated with the row

p_any_sha1_hashes

[string]

Panther added field with collection of SHA1 hashes associated with the row

p_any_md5_hashes

[string]

Panther added field with collection of MD5 hashes associated with the row

p_any_sha256_hashes

[string]

Panther added field with collection of SHA256 hashes of any algorithm associated with the row

GitLab.Audit

GitLab log file containing changes to group or project settings Reference: https://docs.gitlab.com/ee/administration/logs.html#audit_jsonlog

Column

Type

Description

severity

string

The log level

time

timestamp

The event timestamp

author_id

bigint

User id that made the change

entity_id

bigint

Id of the entity that was modified

entity_type

string

Type of the modified entity

change

string

Type of change to the settings

from

string

Old setting value

to

string

New setting value

author_name

string

Name of the user that made the change

target_id

bigint

Target id of the modified setting

target_type

string

Target type of the modified setting

target_details

string

Details of the target of the modified setting

p_log_type

string

Panther added field with type of log

p_row_id

string

Panther added field with unique id (within table)

p_event_time

timestamp

Panther added standardize event time (UTC)

p_parse_time

timestamp

Panther added standardize log parse time (UTC)

p_any_ip_addresses

[string]

Panther added field with collection of ip addresses associated with the row

p_any_domain_names

[string]

Panther added field with collection of domain names associated with the row

p_any_sha1_hashes

[string]

Panther added field with collection of SHA1 hashes associated with the row

p_any_md5_hashes

[string]

Panther added field with collection of MD5 hashes associated with the row

p_any_sha256_hashes

[string]

Panther added field with collection of SHA256 hashes of any algorithm associated with the row

GitLab.Exceptions

GitLab log file containing changes to group or project settings Reference: https://docs.gitlab.com/ee/administration/logs.html#exceptions_jsonlog

Column

Type

Description

severity

string

The log level

time

timestamp

The event timestamp

correlation_id

string

Request unique id across logs

extra.server

{ "os":{ "name":string, "version":string, "build":string }, "runtime":{ "name":string, "version":string } }

Information about the server on which the exception occurred

extra.project_id

bigint

Project id where the exception occurred

extra.relation_key

string

Relation on which the exception occurred

extra.relation_index

bigint

Relation index on which the exception occurred

exception.class

string

Class name of the exception that occurred

exception.message

string

Message of the exception that occurred

exception.backtrace

[string]

Stack trace of the exception that occurred

p_log_type

string

Panther added field with type of log

p_row_id

string

Panther added field with unique id (within table)

p_event_time

timestamp

Panther added standardize event time (UTC)

p_parse_time

timestamp

Panther added standardize log parse time (UTC)

p_any_ip_addresses

[string]

Panther added field with collection of ip addresses associated with the row

p_any_domain_names

[string]

Panther added field with collection of domain names associated with the row

p_any_sha1_hashes

[string]

Panther added field with collection of SHA1 hashes associated with the row

p_any_md5_hashes

[string]

Panther added field with collection of MD5 hashes associated with the row

p_any_sha256_hashes

[string]

Panther added field with collection of SHA256 hashes of any algorithm associated with the row

GitLab.Git

GitLab log file containing all failed requests from GitLab to Git repositories. Reference: https://docs.gitlab.com/ee/administration/logs.html#git_jsonlog

Column

Type

Description

severity

string

The log level

time

timestamp

The event timestamp

correlation_id

string

Unique id across logs

message

string

The error message from git

p_log_type

string

Panther added field with type of log

p_row_id

string

Panther added field with unique id (within table)

p_event_time

timestamp

Panther added standardize event time (UTC)

p_parse_time

timestamp

Panther added standardize log parse time (UTC)

p_any_ip_addresses

[string]

Panther added field with collection of ip addresses associated with the row

p_any_domain_names

[string]

Panther added field with collection of domain names associated with the row

p_any_sha1_hashes

[string]

Panther added field with collection of SHA1 hashes associated with the row

p_any_md5_hashes

[string]

Panther added field with collection of MD5 hashes associated with the row

p_any_sha256_hashes

[string]

Panther added field with collection of SHA256 hashes of any algorithm associated with the row

GitLab.Integrations

GitLab log with information about integrations activities such as Jira, Asana, and Irker services. Reference: https://docs.gitlab.com/ee/administration/logs.html#integrations_jsonlog

Column

Type

Description

severity

string

The log level

time

timestamp

The event timestamp

service_class

string

The class name of the integrated service

project_id

bigint

The project id the integration was running on

project_path

string

The project path the integration was running on

message

string

The log message from the service

client_url

string

The client url of the service

error

string

The error name if an error has occurred

p_log_type

string

Panther added field with type of log

p_row_id

string

Panther added field with unique id (within table)

p_event_time

timestamp

Panther added standardize event time (UTC)

p_parse_time

timestamp

Panther added standardize log parse time (UTC)

p_any_ip_addresses

[string]

Panther added field with collection of ip addresses associated with the row

p_any_domain_names

[string]

Panther added field with collection of domain names associated with the row

p_any_sha1_hashes

[string]

Panther added field with collection of SHA1 hashes associated with the row

p_any_md5_hashes

[string]

Panther added field with collection of MD5 hashes associated with the row

p_any_sha256_hashes

[string]

Panther added field with collection of SHA256 hashes of any algorithm associated with the row

GitLab.Production

GitLab log for Production controller requests received from GitLab Reference: https://docs.gitlab.com/ee/administration/logs.html#production_jsonlog

Column

Type

Description

method

string

The HTTP method of the request

path

string

The URL path for the request

format

string

The response output format

controller

string

The Production controller class name

action

string

The Production controller action

status

bigint

The HTTP response status code

time

timestamp

The request timestamp

params

[{ "key":string, "value":string }]

The URL query parameters

remote_ip

string

The remote IP address of the HTTP request

user_id

bigint

The user id of the request

username

string

The username of the request

ua

string

The User-Agent of the requester

queue_duration_s

float

Total time that the request was queued inside GitLab Workhorse

gitaly_calls

bigint

Total number of calls made to Gitaly

gitaly_duration_s

float

Total time taken by Gitaly calls

redis_calls

bigint

Total number of calls made to Redis

redis_duration_s

float

Total time to retrieve data from Redis

redis_read_bytes

bigint

Total bytes read from Redis

redis_write_bytes

bigint

Total bytes written to Redis

correlation_id

string

Request unique id across logs

cpu_s

float

Total time spent on CPU

db_duration_s

float

Total time to retrieve data from PostgreSQL

view_duration_s

float

Total time taken inside the Rails views

duration_s

float

Total time taken to retrieve the request

exception.class

string

Class name of the exception that occurred

exception.message

string

Message of the exception that occurred

exception.backtrace

[string]

Stack trace of the exception that occurred

p_log_type

string

Panther added field with type of log

p_row_id

string

Panther added field with unique id (within table)

p_event_time

timestamp

Panther added standardize event time (UTC)

p_parse_time

timestamp

Panther added standardize log parse time (UTC)

p_any_ip_addresses

[string]

Panther added field with collection of ip addresses associated with the row

p_any_domain_names

[string]

Panther added field with collection of domain names associated with the row

p_any_sha1_hashes

[string]

Panther added field with collection of SHA1 hashes associated with the row

p_any_md5_hashes

[string]

Panther added field with collection of MD5 hashes associated with the row

p_any_sha256_hashes

[string]

Panther added field with collection of SHA256 hashes of any algorithm associated with the row