To answer this question, you can use Search -> Pivot to look at the data models in question. Network Traffic and maybe Network Sessions are the most likely to be interesting. Limit to the sourcetypes in question and a reasonable timeframe, then add the fields you're concerned about. If it shows up in a data model, then ES cares about it. If it doesn't, it doesn't.