Reference Guide

Table 1. Journal field descriptions (continued)
Type Name Description
Default _MACHINE_ID Machine ID of the host from where the journal entry originates
from.
Default _PID The process ID of the process the journal entry originates
from.
Default _SELINUX_CONTEXT The SELinux security context (label) of the process from
where the journal entry originates from.
Default _SOURCE_REALTIME_TIMESTAMP Earliest trusted timestamp of the message.
Default _STREAM_ID Unique identifier of the stream connection when it was first
created.
Default _SYSTEMD_CGROUP,
_SYSTEMD_INVOCATION_ID,
_SYSTEMD_OWNER_UID,
_SYSTEMD_SESSION, _SYSTEMD_SLICE,
_SYSTEMD_UNIT,
_SYSTEMD_USER_UNIT
Systemd information of the process the journal entry
originates from.
Default _TRANSPORT Information on how the journal service received the message
entry.
Default _UDEV_DEVLINK The low-level Unix error number causing this entry.
Default _UDEV_DEVNODE The device node path of this device in /dev.
Default _UDEV_SYSNAME The kernel device name as it shows up in the device tree
below /sys.
Default _UID The user ID of the process the journal entry originates from.
Custom AUDIT_TIMESTAMP, AUDIT_USERNAME,
AUDIT_IS_SUCCESSFUL,
AUDIT_CLIENT_ADDRESS,
AUDIT_SERVER_ADDRESS,
AUDIT_APPLIANCE_ID, AUDIT_JOB_ID,
AUDIT_RESOURCE_TYPE,
AUDIT_RESOURCE_ACTION,
AUDIT_RESOURCE_ID,
AUDIT_RESOURCE_NAME,
AUDIT_MESSAGE_CODE,
AUDIT_MESSAGE_L10N,
AUDIT_REQUEST_BODY
Additional fields used in the audit logs.
Default CODE_FILE Source file name that contains the code generating the
message.
Default CODE_FUNC Function name in the code generating the message.
Default CODE_LINE Location of the code in the source file generating the
message.
Custom COMPONENT The logging component. Values include:
● CP—Components that enable management of the cluster.
● DP—Backend data engine components.
● Platform—Backend platform or base storage container
(BSC) components.
● Service—Serviceability or service container
components.
● Fireman—Backend services responsible for handling
communications between internal components.
● PostGres—PostGres services.
78 System Journal Fields