Clarify host definition (#195)

* Clarify Host definition

* CHANGELOG.md

* fix typos, tweak definition

* fix typos, tweak definition

Author: MikePaquette

CHANGELOG.md

@@ -28,6 +28,7 @@ All notable changes to this project will be documented in this file based on the
 * Improved the definition of the agent fields #192
 * Improve definition of events, logs, and metrics in event section #194
 * Improved the definition of network fields in intro section #197
+* Improved the definition of host fields #195
 
 ### Deprecated
 

README.md

@@ -264,9 +264,7 @@ The group fields are meant to represent groups that are relevant to the event.
 
 ## <a name="host"></a> Host fields
 
-Host fields provide information related to a host. A host can be a physical machine, a virtual machine, or a Docker container.
-
-Normally the host information is related to the machine on which the event was generated/collected, but they can be used differently if needed.
+A host is defined as a general computing instance. ECS host.* fields should be populated with details about the host on which the event happened, or on which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes.
 
 
 | Field  | Description  | Level  | Type  | Example  |

fields.yml

@@ -684,11 +684,7 @@
       title: Host
       group: 2
       description: >
-        Host fields provide information related to a host. A host can be a
-        physical machine, a virtual machine, or a Docker container.
-    
-        Normally the host information is related to the machine on which the event
-        was generated/collected, but they can be used differently if needed.
+        A host is defined as a general computing instance. ECS host.* fields should be populated with details about the host on which the event happened, or on which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes.
       type: group
       fields:
 

schemas/host.yml

@@ -3,11 +3,7 @@
   title: Host
   group: 2
   description: >
-    Host fields provide information related to a host. A host can be a
-    physical machine, a virtual machine, or a Docker container.
-
-    Normally the host information is related to the machine on which the event
-    was generated/collected, but they can be used differently if needed.
+    A host is defined as a general computing instance. ECS host.* fields should be populated with details about the host on which the event happened, or on which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes.
   type: group
   fields: