Add response fields to Kibana module based on ECS

filebeat/_meta/fields.common.yml

@@ -114,3 +114,20 @@
         log events this is when the log line was read by Filebeat. In comparison
         @timestamp is the processed timestamp from the log line. If both are identical
         only @timestamp should be used.
+
+    - name: http.response.status_code
+      type: long
+      description: >
+        HTTP response status_code.
+      example: 404
+
+    - name: http.response.elapsed_time
+      type: long
+      description: >
+        Elapsed time between request and response in milli seconds.
+
+    - name: http.response.content_length
+      type: long
+      description: >
+        Content length of the HTTP response body.
+

filebeat/docs/fields.asciidoc

@@ -2551,6 +2551,38 @@ type: date
 event.created contains the date on which the event was created. In case of log events this is when the log line was read by Filebeat. In comparison @timestamp is the processed timestamp from the log line. If both are identical only @timestamp should be used.
 
 
+--
+
+*`http.response.status_code`*::
++
+--
+type: long
+
+example: 404
+
+HTTP response status_code.
+
+
+--
+
+*`http.response.elapsed_time`*::
++
+--
+type: long
+
+Elapsed time between request and response in milli seconds.
+
+
+--
+
+*`http.response.content_length`*::
++
+--
+type: long
+
+Content length of the HTTP response body.
+
+
 --
 
 [[exported-fields-logstash]]