---
name: cloud-logs-metadata
title: Metadata fields
description: IBM Cloud Logs includes metadata fields that can be used to catalog and filter logs, grant user permissions and access to data, create log templates and template branches, and track anomalies.
last-updated: 2025-06-10
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/cloud-logs?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Metadata fields
{: #metadata}

IBM Cloud Logs includes metadata fields that can be used to catalog and filter logs, grant user permissions and access to data, create log templates and template branches, and track anomalies.
{: shortdesc}

## Application name
{: #md-app-name}

The application name is the environment that produces and sends logs to IBM Cloud Logs.

The following are samples of application names based on the log source:

| Source                                           | Application Name            |
|--------------------------------------------------|-----------------------------|
| Activity tracking events                         | `ibm-audit-event` |
| Platform logs                                    | `ibm-platform-logs`|
| Red Hat OpenShift on IBM Cloud cluster | `kubernetes.namespace_name`  |
| IBM Cloud Kubernetes Service cluster | `kubernetes.namespace_name` |
| Linux server                                     | `${HOSTNAME}` |
| Windows server                                   | `${COMPUTERNAME}` |
| PowerVS                                          | `ibm-audit-event` | 
| IBM Cloud® Internet Services logs `[*]` | `ibm-platform-log` |
{: caption="Application names" caption-side="bottom"}


`[*]` - For information about configuring IBM Cloud® Internet Services logs, see [Managing Logpush jobs](https://cloud.ibm.com/docs/cis?topic=cis-logpush&interface=api&format=markdown).


## Subsystem name
{: #md-sys-name}

The subsystem name is the service or application that produces and sends logs to IBM Cloud Logs.

The following are samples of subsystem names based on the log source:

| Source                                           | Subsystem Name |
|--------------------------------------------------|-------|
| Activity tracking events                         | `CRNserviceName:instanceID` |
| VPC activity tracking events                     | `is:resourceType` |
| PowerVS activity tracking events          | `power-iass:<workspaceID>` |
| Platform logs                                    | `CRNserviceName:instanceID`|
| VPC platform logs                                | `is:resourceType`|
| Red Hat OpenShift on IBM Cloud cluster | `kubernetes.container_name`  |
| IBM Cloud Kubernetes Service cluster | `kubernetes.container_name`  |
| Linux server                                     |  |
| Windows server                                   | `ProviderName` |
| IBM Cloud&reg; Internet Services logs `[*]` | `internet-svcs:instanceID` |
{: caption="Subsystem names" caption-side="bottom"}


`[*]` - For information about configuring IBM Cloud&reg; Internet Services logs, see [Managing Logpush jobs](https://cloud.ibm.com/docs/cis?topic=cis-logpush&interface=api&format=markdown).