Fields in Tetragon runtime logs-Simple Log Service(SLS)-阿里云帮助中心

The following table describes the fields in Tetragon container runtime logs that are shipped to a Logstore.

Log field	Description
arguments	The execution parameters.
binary	The executable file.
call_name	The name of the built-in function called by the eBPF program.
cap	The Linux capabilities.
cwd	The current working directory.
event_time	The time when the event was generated.
event_type	The event type. Valid values: process_kprobe and process_exec.
exec_id	The process execution ID.
network	protocol: protocol saddr: source IP address sport: source port daddr: destination IP address dport: destination port
network_bytes	The network traffic in bytes.
parent_exec_id	The parent process execution ID.
parent_process	The parent process information.
pid	The process ID.
pod	namespace name container pod_labels workload workload_kind
policy_name	The policy name.