EDR Format

EDR Format

Each EDR is a JSON object consisting of several core standard EDR fields along with additional fields inserted by JSLEE services. A simple EDR might look like:

{
    "type": "example-edr",
    "node-name": "n2-slee-01",
    "event-timestamp": "2019-11-03T00:27:48.084171Z",
    "correlation-info": {
        "slee-session-id": "3781385963;475;234550600040002",
        "slee-event-id": "1/1"
    },
    "source-info": {
        "source-service": "example-service",
        "source-system": "test"
    },
    "status-message": "OK"
}

Actual EDRs generated will contain significantly more information from the generating service. Refer to specific application information for details of additional fields written for specific EDRs by those applications.

EDR Field Types

The field types used in generated EDRs are as below. For more information about any field type, please refer to the JSON standard.

Type Description
Object The Object type consists of zero or more arbitrary fields of any type. The order of elements in an Object is arbitrary. This is a native JSON field type.
Array The Array field type consists of zero or more Object type values. The order of elements in an Array is fixed. This is a native JSON field type.
String The String field type is either the literal value null or always enclosed in double quotes, containing arbitrary text data. This is a native JSON field type.
Integer The Integer field type is a whole integer value. This is a specific class of the native JSON number field type.
Boolean The Boolean field type supports only unquoted true or false values. This is a native JSON field type.
Timestamp The Timestamp field type is always enclosed in double quotes and represents a UTC time (in microseconds precision) in extended ISO 8601 format without a delimiter, e.g. "2019-11-03T00:27:48.084171Z". This is a specific class of the native JSON string field type.