Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ICMP protocol to use ECS fields #10062

Merged
merged 2 commits into from
Jan 16, 2019

Commits on Jan 14, 2019

  1. Update ICMP protocol to use ECS fields

    Only a few fields were changed. No dashboards were changed because there are no ICMP specific dashboards.
    
    Here's a summary of what fields changed.
    
    Part of elastic#7968
    
    Changed
    
    - responsetime -> event.duration (unit are now nanoseconds)
    - bytes_in -> source.bytes
    - bytes_out -> destination.bytes
    
    Added
    
    - event.dataset = icmp
    - event.end
    - event.start
    - network.community_id
    - network.transport = icmp or ipv6-icmp
    - network.type = ipv4/ipv6
    
    Unchanged Packetbeat Fields
    
    - status
    - type = icmp (we might remove this since we have event.dataset)
    - path = destination.ip (what is requested, not sure if this still makes sense)
    andrewkroh committed Jan 14, 2019
    Configuration menu
    Copy the full SHA
    af9f7c9 View commit details
    Browse the repository at this point in the history

Commits on Jan 15, 2019

  1. Change NNNN to 10062

    andrewkroh committed Jan 15, 2019
    Configuration menu
    Copy the full SHA
    4d681b5 View commit details
    Browse the repository at this point in the history