diff --git a/README.md b/README.md index 097d567911..2ae7203922 100644 --- a/README.md +++ b/README.md @@ -138,7 +138,7 @@ Container fields are used for meta information about the specific container that ## Destination fields -Destination fields describe details about the destination of a packet/event. +Destination fields describe details about the destination of a packet/event. Destination fields are usually populated in conjuction with source fields. | Field | Description | Level | Type | Example | @@ -404,7 +404,7 @@ The service fields describe the service for or from which the data was collected ## Source fields -Source fields describe details about the source of a packet/event. +Source fields describe details about the source of a packet/event. Source fields are usually populated in conjuction with destination fields. | Field | Description | Level | Type | Example | diff --git a/fields.yml b/fields.yml index 87704127c9..c05777b20b 100644 --- a/fields.yml +++ b/fields.yml @@ -239,7 +239,7 @@ group: 2 description: > Destination fields describe details about the destination of a - packet/event. + packet/event. Destination fields are usually populated in conjuction with source fields. type: group fields: @@ -1222,7 +1222,7 @@ group: 2 description: > Source fields describe details about the source of a - packet/event. + packet/event. Source fields are usually populated in conjuction with destination fields. type: group fields: diff --git a/schemas/destination.yml b/schemas/destination.yml index e9f5ed2049..fea490e17f 100644 --- a/schemas/destination.yml +++ b/schemas/destination.yml @@ -4,7 +4,7 @@ group: 2 description: > Destination fields describe details about the destination of a - packet/event. + packet/event. Destination fields are usually populated in conjuction with source fields. type: group fields: diff --git a/schemas/source.yml b/schemas/source.yml index 098df51ddc..d1dae1f71a 100644 --- a/schemas/source.yml +++ b/schemas/source.yml @@ -4,7 +4,7 @@ group: 2 description: > Source fields describe details about the source of a - packet/event. + packet/event. Source fields are usually populated in conjuction with destination fields. type: group fields: