Projection

col	Reference one or more columns as an expression.
ColumnDefinition	The column one Grok capture produces: its name and data type.