Skip to content

Commit

Permalink
Update pgSQL protocol to use ECS fields
Browse files Browse the repository at this point in the history
That dashboard was updated too.

Here's a summary of what fields changed.

Part of elastic#7968

Changed

- bytes_in -> source.bytes
- bytes_out -> destination.bytes
- notes -> error.message
- responsetime -> event.duration (unit are now nanoseconds)

Added

- destination
- event.dataset = pgsql
- event.end
- event.start
- network.bytes
- network.community_id
- network.protocol = pgsql
- network.transport = tcp
- network.type
- source

Removed

- pgsql.iserror - It was a boolean that reflected the same information as `status` which uses OK or Error.
- pgsql.query - It was in fields.yml but not in the code.

Unchanged Packetbeat Fields

- method
- query
- status
- type = pgsql (we might remove this since we have event.dataset)
  • Loading branch information
andrewkroh committed Jan 23, 2019
1 parent 262fd04 commit f48700e
Show file tree
Hide file tree
Showing 10 changed files with 1,280 additions and 842 deletions.
1 change: 1 addition & 0 deletions CHANGELOG.next.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -80,6 +80,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
- Changed DHCPv4 protocol fields to align with ECS. {pull}10089[10089]
- Changed AMQP protocol fields to align with ECS. {pull}10090[10090]
- Changed Redis protocol fields to align with ECS. {pull}10126[10126]
- Changed pgsql protocol fields to align with ECS. {pull}NNNNN[NNNNN]
- Changed HTTP protocol fields to align with ECS. {pull}9976[9976]
- Changed MongoDB protocol fields to align with ECS. {pull}10158[10158]
- Changed MySQL protocol fields to align with ECS. {pull}10155[10155]
Expand Down
Loading

0 comments on commit f48700e

Please sign in to comment.