Skip to content

Add flexibility to the field set reuse mechanism #820

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
webmat wants to merge 12 commits into from
Closed

Add flexibility to the field set reuse mechanism #820

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
6568fe2
Function to turn single word reuse locations into the dictionary nota…
Apr 16, 2020
e0befee
Validate that keys 'as' and 'at' are present in dictionary notation
Apr 16, 2020
53556a0
Actually resolve the shorthands when reading schemas
Apr 16, 2020
88313e7
Unrelated: removed dead code
Apr 16, 2020
05d2847
Precompute the full path of a nesting, considering nesting as another…
Apr 17, 2020
ee51313
First pass at self-nesting
Apr 17, 2020
108dd35
Missed a generated file
Apr 20, 2020
ab82e6e
Code formatting
Apr 20, 2020
a3b5fde
Changelog
Apr 20, 2020
2918cdd
Fix asciidoc link when nesting as another name
Apr 20, 2020
d0c0271
Change the wording of using a field set at the root of events (instea…
Apr 20, 2020
c90885f
Remove commented code
Apr 20, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGELOG.next.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,8 @@ Thanks, you're awesome :-) -->
had `reusable.top_level:false`. This PR affects `ecs_flat.yml`, the csv file
and the sample Elasticsearch templates. #495, #813
* Removed the `order` attribute from the `ecs_nested.yml` and `ecs_flat.yml` files. #811
* In `ecs_nested.yml`, the array of strings that used to be in `reusable.expected`
has been replaced by an array of objects with 3 keys: 'as', 'at' and 'full'. #820

#### Bugfixes

Expand All @@ -58,6 +60,8 @@ Thanks, you're awesome :-) -->
* Add support for reusing offical fieldsets in custom schemas. #751
* Add full path names to reused fieldsets in `nestings` array in `ecs_nested.yml`. #803
* Allow shorthand notation for including all subfields in subsets. #805
* Add ability to nest field sets as another name. #820
* Add ability to nest field sets within themselves (e.g. `process.parent.*`). #820

#### Deprecated

Expand Down
67 changes: 0 additions & 67 deletions code/go/ecs/process.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading