Skip to content

Commit

Permalink
Update MySQL protocol to use ECS fields (#10155)
Browse files Browse the repository at this point in the history
That dashboard was updated too.

Here's a summary of what fields changed.

Part of #7968

Changed

- bytes_in -> source.bytes
- bytes_out -> destination.bytes
- notes -> error.message
- responsetime -> event.duration (unit are now nanoseconds)

Added

- destination
- event.dataset = mysql
- event.end
- event.start
- network.bytes
- network.community_id
- network.protocol = mysql
- network.transport = tcp
- network.type
- source

Removed

- mysql.iserror - It was a boolean that reflected the same information as `status` which uses OK or Error.

Unchanged Packetbeat Fields

- method
- query
- params
- path
- status
- type = mysql (we might remove this since we have event.dataset)
  • Loading branch information
andrewkroh committed Jan 18, 2019
1 parent 74098c6 commit 3bed23c
Show file tree
Hide file tree
Showing 11 changed files with 1,251 additions and 845 deletions.
1 change: 1 addition & 0 deletions CHANGELOG.next.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -71,6 +71,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
- Changed AMQP protocol fields to align with ECS. {pull}10090[10090]
- Changed Redis protocol fields to align with ECS. {pull}10126[10126]
- Changed HTTP protocol fields to align with ECS. {pull}9976[9976]
- Changed MySQL protocol fields to align with ECS. {pull}10155[10155]
- Changed NFS protocol fields to align with ECS. {pull}10153[10153]
- Changed Thrift protocol fields to align with ECS. {pull}10125[10125]
- Changed Cassandra protocol fields to align with ECS. {pull}10093[10093]
Expand Down
8 changes: 8 additions & 0 deletions dev-tools/ecs-migration.yml
Original file line number Diff line number Diff line change
Expand Up @@ -918,6 +918,14 @@
to: network.forwarded_ip
alias: false

## MySQL
- from: mysql.iserror
to: status
alias: false
comment: >
Status reflects whether or not an error occured. Its values are either
OK or Error.
## NFS
- from: rpc.time
to: event.duration
Expand Down
Loading

0 comments on commit 3bed23c

Please sign in to comment.