ECS-http

{
  "_index": "filebeat-2020.04.01-000001",
  "_type": "_doc",
  "_id": "oyqwN3EBWfbVw0yHsAwZ",
  "_version": 1,
  "_score": null,
  "_source": {
    "user": {
      "id": "-"
    },
    "agent": {
      "id": "580c34af-1f79-4df0-91dc-72e7012c6aa8",
      "hostname": "xxxxxxxx",
      "version": "7.6.2",
      "ephemeral_id": "a1c05437-ecc4-47fa-a256-88998f0f7307",
      "type": "filebeat"
    },
    "input": {
      "type": "container"
    },
    "timestamp": "01/Apr/2020:21:40:46 +0000",
    "ecs": {
      "version": "1.4.0"
    },
    "event": {
      "timezone": "Pacific/Auckland",
      "ingested": "2020-04-01T21:40:46.582Z"
    },
    "metadata": {
      "ingress": {
        "ip_address": "xxx.xxx.xxx.xxx",
        "beat": "filebeat"
      }
    },
    "host": {
      "containerized": true,
      "os": {
        "platform": "centos",
        "kernel": "4.19.94",
        "codename": "Core",
        "version": "7 (Core)",
        "family": "redhat",
        "name": "CentOS Linux"
      },
      "hostname": "xxxxxxxx",
      "ip": [
        "xxx.xxx.xxx.xxx"
      ],
      "mac": [
        "xx:xx:xx:xx:xx:xx"
      ],
      "architecture": "x86_64",
      "name": "xxxxxxxx"
    },
    "@version": "1",
    "kelp": {
      "event": {
        "original_timestamp": "2020-04-01T21:40:46.582Z",
        "type": "nginx"
      }
    },
    "http": {
      "response": {
        "status_code": "200",
        "bytes": "612"
      },
      "request": {
        "method": "GET",
        "referrer": "\"-\""
      }
    },
    "url": {
      "path": "/",
      "original": "/",
      "username": "-"
    },
    "log": {
      "offset": 1141,
      "file": {
        "path": "/var/log/pods/default_nginx-deployment-xxxxxxxx/nginx/3.log"
      }
    },
    "tags": [
      "_geoip_lookup_failure"
    ],
    "catalyst": {
      "host": {
        "timezone": "Pacific/Auckland",
        "role": "UNDEFINED",
        "fqdn": "xxxxxxxxx"
      },
      "client": {
        "name": "xxxxx"
      }
    },
    "message": "127.0.0.1 - - [01/Apr/2020:21:40:46 +0000] \"GET /\" 200 612 \"-\" \"-\" \"-\"",
    "client": {
      "ip": "127.0.0.1",
      "geo": {}
    },
    "user_agent": {
      "original": "\"-\""
    },
    "@timestamp": "2020-04-01T21:40:46.582Z",
    "stream": "stdout"
  },
  "fields": {
    "event.ingested": [
      "2020-04-01T21:40:46.582Z"
    ],
    "@timestamp": [
      "2020-04-01T21:40:46.582Z"
    ]
  },
  "sort": [
    1585777246582
  ]
}