Display Filter Reference: Riemann

Protocol field name: riemann

Versions: 2.0.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
riemann.attribute attribute Label 2.0.0 to 2.6.5
riemann.attribute.key key Character string 2.0.0 to 2.6.5
riemann.attribute.value value Character string 2.0.0 to 2.6.5
riemann.event event Label 2.0.0 to 2.6.5
riemann.event.description description Character string 2.0.0 to 2.6.5
riemann.event.host host Character string 2.0.0 to 2.6.5
riemann.event.metric_d metric_d Floating point (double-precision) 2.0.0 to 2.6.5
riemann.event.metric_f metric_f Floating point (single-precision) 2.0.0 to 2.6.5
riemann.event.metric_sint64 metric_sint64 Signed integer, 8 bytes 2.0.0 to 2.6.5
riemann.event.service service Character string 2.0.0 to 2.6.5
riemann.event.state state Character string 2.0.0 to 2.6.5
riemann.event.tag tag Character string 2.0.0 to 2.6.5
riemann.event.time time Signed integer, 8 bytes 2.0.0 to 2.6.5
riemann.event.ttl ttl Floating point (single-precision) 2.0.0 to 2.6.5
riemann.insufficient_data Insufficient data Label 2.0.0 to 2.6.5
riemann.msg.error error Character string 2.0.0 to 2.6.5
riemann.msg.ok ok Boolean 2.0.0 to 2.6.5
riemann.query query Label 2.0.0 to 2.6.5
riemann.query.string string Character string 2.0.0 to 2.6.5
riemann.state state Label 2.0.0 to 2.6.5
riemann.state.description description Character string 2.0.0 to 2.6.5
riemann.state.host host Character string 2.0.0 to 2.6.5
riemann.state.once once Boolean 2.0.0 to 2.6.5
riemann.state.service service Character string 2.0.0 to 2.6.5
riemann.state.state state Character string 2.0.0 to 2.6.5
riemann.state.tag tag Character string 2.0.0 to 2.6.5
riemann.state.time time Signed integer, 8 bytes 2.0.0 to 2.6.5
riemann.state.ttl ttl Floating point (single-precision) 2.0.0 to 2.6.5
riemann.unknown_field_number Unknown field number Label 2.0.0 to 2.6.5
riemann.unknown_wire_tag Invalid format type Label 2.0.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More