Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions packages/elasticsearch/data_stream/ccr/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/elasticsearch/data_stream/enrich/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/elasticsearch/data_stream/index/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/elasticsearch/data_stream/ml_job/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/elasticsearch/data_stream/node/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/elasticsearch/data_stream/shard/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,3 +17,5 @@
external: ecs
- name: service.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/kibana/data_stream/cluster_actions/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,5 @@
external: ecs
- name: host.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/kibana/data_stream/cluster_rules/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,5 @@
external: ecs
- name: host.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/kibana/data_stream/node_actions/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,5 @@
external: ecs
- name: host.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/kibana/data_stream/node_rules/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,5 @@
external: ecs
- name: host.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/kibana/data_stream/stats/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,5 @@
external: ecs
- name: host.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/kibana/data_stream/status/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,3 +11,5 @@
- name: service.address
type: keyword
description: Address where data about this service was collected from.
- name: error.message
external: ecs
4 changes: 4 additions & 0 deletions packages/kibana/docs/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -353,6 +353,7 @@ Cluster actions metrics documentation
| data_stream.namespace | Data stream namespace. | constant_keyword |
| data_stream.type | Data stream type. | constant_keyword |
| ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword |
| error.message | Error message. | match_only_text |
| event.dataset | Name of the dataset. If an event source publishes more than one type of log or events (e.g. access log, error log), the dataset is used to specify which one the event comes from. It's recommended but not required to start the dataset name with the module name, followed by a dot, then the dataset name. | keyword |
| event.duration | Duration of the event in nanoseconds. If event.start and event.end are known this value should be the difference between the end and start time. | long |
| event.module | Name of the module this data is coming from. If your monitoring agent supports the concept of modules or plugins to process events of a given source (e.g. Apache logs), `event.module` should contain the name of this module. | keyword |
Expand Down Expand Up @@ -465,6 +466,7 @@ Cluster rules metrics
| data_stream.namespace | Data stream namespace. | constant_keyword |
| data_stream.type | Data stream type. | constant_keyword |
| ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword |
| error.message | Error message. | match_only_text |
| event.dataset | Name of the dataset. If an event source publishes more than one type of log or events (e.g. access log, error log), the dataset is used to specify which one the event comes from. It's recommended but not required to start the dataset name with the module name, followed by a dot, then the dataset name. | keyword |
| event.duration | Duration of the event in nanoseconds. If event.start and event.end are known this value should be the difference between the end and start time. | long |
| event.module | Name of the module this data is coming from. If your monitoring agent supports the concept of modules or plugins to process events of a given source (e.g. Apache logs), `event.module` should contain the name of this module. | keyword |
Expand Down Expand Up @@ -577,6 +579,7 @@ Node actions metrics
| data_stream.namespace | Data stream namespace. | constant_keyword |
| data_stream.type | Data stream type. | constant_keyword |
| ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword |
| error.message | Error message. | match_only_text |
| event.dataset | Name of the dataset. If an event source publishes more than one type of log or events (e.g. access log, error log), the dataset is used to specify which one the event comes from. It's recommended but not required to start the dataset name with the module name, followed by a dot, then the dataset name. | keyword |
| event.duration | Duration of the event in nanoseconds. If event.start and event.end are known this value should be the difference between the end and start time. | long |
| event.module | Name of the module this data is coming from. If your monitoring agent supports the concept of modules or plugins to process events of a given source (e.g. Apache logs), `event.module` should contain the name of this module. | keyword |
Expand Down Expand Up @@ -685,6 +688,7 @@ Node rules metrics
| data_stream.namespace | Data stream namespace. | constant_keyword |
| data_stream.type | Data stream type. | constant_keyword |
| ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword |
| error.message | Error message. | match_only_text |
| event.dataset | Name of the dataset. If an event source publishes more than one type of log or events (e.g. access log, error log), the dataset is used to specify which one the event comes from. It's recommended but not required to start the dataset name with the module name, followed by a dot, then the dataset name. | keyword |
| event.duration | Duration of the event in nanoseconds. If event.start and event.end are known this value should be the difference between the end and start time. | long |
| event.module | Name of the module this data is coming from. If your monitoring agent supports the concept of modules or plugins to process events of a given source (e.g. Apache logs), `event.module` should contain the name of this module. | keyword |
Expand Down
2 changes: 2 additions & 0 deletions packages/logstash/data_stream/node/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,3 +23,5 @@
external: ecs
- name: host.name
external: ecs
- name: error.message
external: ecs
2 changes: 2 additions & 0 deletions packages/logstash/data_stream/node_stats/fields/ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,3 +23,5 @@
external: ecs
- name: host.name
external: ecs
- name: error.message
external: ecs