Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Ingest Management] Use ECS metadata from elastic agent #64173

Closed
michalpristas opened this issue Apr 22, 2020 · 5 comments · Fixed by #64452
Closed

[Ingest Management] Use ECS metadata from elastic agent #64173

michalpristas opened this issue Apr 22, 2020 · 5 comments · Fixed by #64452
Assignees
Labels
enhancement New value added to drive a business result Feature:Fleet Fleet team's agent central management project Ingest Management:alpha1 Group issues for ingest management alpha1 Team:Fleet Team label for Observability Data Collection Fleet team

Comments

@michalpristas
Copy link

michalpristas commented Apr 22, 2020

Elastic agent now sends ECS compliant metadata introduced in this PR elastic/beats#17894

There's a need to replace use of these metadata from local_metadata

  • platform
  • version
  • host

To ECS.

{
 "os" : { "platform": "windows" },
 "agent": {"version": "8.0.0"},
"host": {"hostname": "foobar"},
}

cc @nchaulet

@michalpristas michalpristas added enhancement New value added to drive a business result Feature:Fleet Fleet team's agent central management project Team:Fleet Team label for Observability Data Collection Fleet team labels Apr 22, 2020
@elasticmachine
Copy link
Contributor

Pinging @elastic/ingest-management (Team:Ingest Management)

@ph
Copy link
Contributor

ph commented Apr 24, 2020

@michalpristas This will need to be an object. ^

@nchaulet
Copy link
Member

@ph @michalpristas are you sending data like this

{
"host.name": "host"
}

or

{
  "host": { "name": "host"}
}

@ph
Copy link
Contributor

ph commented Apr 24, 2020

@nchaulet at the moment we are sending "host.name" but I believe it should be, this would align with ECS, are you proposing to convert it on your side?

{
  "host": { "name": "host"}
}

@michalpristas
Copy link
Author

yes that's the plan, atm it is Key Value, once your change is in PR i will transform to objects

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New value added to drive a business result Feature:Fleet Fleet team's agent central management project Ingest Management:alpha1 Group issues for ingest management alpha1 Team:Fleet Team label for Observability Data Collection Fleet team
Projects
None yet
Development

Successfully merging a pull request may close this issue.

5 participants