# Log - [Log Attributes](#log-attributes) - [Generic log attributes](#generic-log-attributes) - [File log attributes](#file-log-attributes) - [Record log attributes](#record-log-attributes) ## Log Attributes ### Generic log attributes | Attribute | Type | Description | Examples | Stability | |---|---|---|---|---| | `log.iostream` | string | The stream associated with the log. See below for a list of well-known values. | `stdout` |  | `log.iostream` has the following list of well-known values. If one of them applies, then the respective value MUST be used; otherwise, a custom value MAY be used. | Value | Description | Stability | |---|---|---| | `stdout` | Logs from stdout stream |  | | `stderr` | Events from stderr stream |  | ### File log attributes | Attribute | Type | Description | Examples | Stability | |---|---|---|---|---| | `log.file.name` | string | The basename of the file. | `audit.log` |  | | `log.file.name_resolved` | string | The basename of the file, with symlinks resolved. | `uuid.log` |  | | `log.file.path` | string | The full path to the file. | `/var/log/mysql/audit.log` |  | | `log.file.path_resolved` | string | The full path to the file, with symlinks resolved. | `/var/lib/docker/uuid.log` |  | ### Record log attributes | Attribute | Type | Description | Examples | Stability | |---|---|---|---|---| | `log.record.uid` | string | A unique identifier for the Log Record. [1] | `01ARZ3NDEKTSV4RRFFQ69G5FAV` |  | **[1]:** If an id is provided, other log records with the same id will be considered duplicates and can be removed safely. This means, that two distinguishable log records MUST have different values. The id MAY be an [Universally Unique Lexicographically Sortable Identifier (ULID)](https://github.com/ulid/spec), but other identifiers (e.g. UUID) may be used as needed.