Projection

col	Reference one or more columns as an expression.
ColumnDataType	The data type a ColumnDefinition gives a captured column.
ColumnDefinition	The column one Grok capture produces: its name and data type.