Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Filebeat] Improve ECS categorization in elasticsearch module #16469

Merged
merged 11 commits into from
Mar 12, 2020

Conversation

leehinman
Copy link
Contributor

  • slowlog
    • event.kind
    • event.category
    • event.type
    • host.name
    • host.id
  • server
    • event.kind
    • event.category
    • event.type
    • host.name
    • host.id
  • gc
    • event.kind
    • event.category
    • event.type
  • deprecation
    • event.kind
    • event.category
    • event.type
    • host.id
    • host.name
  • audit
    • event.kind
    • event.category
    • event.type
    • event.outcome
    • lowercase http.request.method
    • host.id
    • host.name
    • related.user
  • converted all pipelines to yaml

@leehinman leehinman added enhancement Filebeat Filebeat needs_backport PR is waiting to be backported to other branches. Team:SIEM ecs labels Feb 20, 2020
@leehinman leehinman requested a review from a team as a code owner February 20, 2020 20:53
@elasticmachine
Copy link
Collaborator

Pinging @elastic/siem (Team:SIEM)

Copy link
Contributor

@ycombinator ycombinator left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

Looks like there's a merge conflict, BTW.

@leehinman leehinman merged commit 3c13de5 into elastic:master Mar 12, 2020
@leehinman leehinman added v7.7.0 and removed needs_backport PR is waiting to be backported to other branches. labels Mar 12, 2020
leehinman added a commit to leehinman/beats that referenced this pull request Mar 12, 2020
…c#16469)

- event.kind
- event.category
- event.type
- event.outcome
- lowercase http.request.method
- host.id
- host.name
- related.user

Closes elastic#16160

(cherry picked from commit 3c13de5)
@leehinman leehinman deleted the 16160_elasticsearch_ecs_1.4 branch March 12, 2020 19:54
leehinman added a commit that referenced this pull request Mar 16, 2020
#16986)

- event.kind
- event.category
- event.type
- event.outcome
- lowercase http.request.method
- host.id
- host.name
- related.user

Closes #16160

(cherry picked from commit 3c13de5)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants