diff --git a/generated/ecs/ecs_flat.yml b/generated/ecs/ecs_flat.yml index 5f6aa7025b..8c1aae71b2 100644 --- a/generated/ecs/ecs_flat.yml +++ b/generated/ecs/ecs_flat.yml @@ -1837,6 +1837,7 @@ event.created: type: date event.dataset: dashed_name: event-dataset + deprecated: true description: 'Name of the dataset. If an event source publishes more than one type of log or events (e.g. access diff --git a/generated/ecs/ecs_nested.yml b/generated/ecs/ecs_nested.yml index 14cc581f24..dc1f7bac81 100644 --- a/generated/ecs/ecs_nested.yml +++ b/generated/ecs/ecs_nested.yml @@ -2188,6 +2188,7 @@ event: type: date dataset: dashed_name: event-dataset + deprecated: true description: 'Name of the dataset. If an event source publishes more than one type of log or events (e.g. access diff --git a/schemas/event.yml b/schemas/event.yml index 204adb3e7b..34beeae108 100644 --- a/schemas/event.yml +++ b/schemas/event.yml @@ -514,6 +514,7 @@ It's recommended but not required to start the dataset name with the module name, followed by a dot, then the dataset name. example: apache.access + deprecated: true - name: provider level: extended