diff --git a/CHANGELOG.md b/CHANGELOG.md index c9a0a24858..bd7469f3e5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -28,6 +28,7 @@ All notable changes to this project will be documented in this file based on the * Improved the definition of the agent fields #192 * Improve definition of events, logs, and metrics in event section #194 * Improved the definition of network fields in intro section #197 +* Improved the definition of host fields #195 ### Deprecated diff --git a/README.md b/README.md index 35f841eef8..1540097472 100644 --- a/README.md +++ b/README.md @@ -264,9 +264,7 @@ The group fields are meant to represent groups that are relevant to the event. ## Host fields -Host fields provide information related to a host. A host can be a physical machine, a virtual machine, or a Docker container. - -Normally the host information is related to the machine on which the event was generated/collected, but they can be used differently if needed. +A host is defined as a general computing instance. ECS host.* fields should be populated with details about the host on which the event happened, or on which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes. | Field | Description | Level | Type | Example | diff --git a/fields.yml b/fields.yml index 123462aeef..60e2370bcb 100644 --- a/fields.yml +++ b/fields.yml @@ -684,11 +684,7 @@ title: Host group: 2 description: > - Host fields provide information related to a host. A host can be a - physical machine, a virtual machine, or a Docker container. - - Normally the host information is related to the machine on which the event - was generated/collected, but they can be used differently if needed. + A host is defined as a general computing instance. ECS host.* fields should be populated with details about the host on which the event happened, or on which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes. type: group fields: diff --git a/schemas/host.yml b/schemas/host.yml index 513fe3dd6d..f841a4663c 100644 --- a/schemas/host.yml +++ b/schemas/host.yml @@ -3,11 +3,7 @@ title: Host group: 2 description: > - Host fields provide information related to a host. A host can be a - physical machine, a virtual machine, or a Docker container. - - Normally the host information is related to the machine on which the event - was generated/collected, but they can be used differently if needed. + A host is defined as a general computing instance. ECS host.* fields should be populated with details about the host on which the event happened, or on which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes. type: group fields: