corelight/ecs-mapping

Issues

• Type Error: dns.id and dns.answers.ttl

  #76 opened a year ago by jamesagarside
  1

• "template_corelight_temporary_log_holdings" still exists.

  #29 opened a year ago by Kytie
  1

• Ingest Pipeline filename typo

  #70 opened a year ago by Mopar-Allday-1988
  0

• Data Streams support

  #37 opened a year ago by s-abdelwahhab
  0

• Set enrich index replica settings

  #27 opened 2 years ago by neu5ron
  0

• Elasticsearch v8+ breaks type mapping.

  #38 opened 3 years ago by Kytie
  1

• "notice" field has no mapping.

  #35 opened 3 years ago by Kytie
  0

• ecs-corelight-various incorrect PE processor.

  #30 opened 3 years ago by Kytie
  1

• ecs-corelight-temporary-corelight_metrics_utilization-2021.08.10 incorrect "suricata" mapping.

  #31 opened 3 years ago by Kytie
  1

• template_corelight_metrics_and_stats incorrect index pattern.

  #32 opened 3 years ago by Kytie
  1

• parse failures for SSH:password_guessing notice

  #23 opened 3 years ago by tvfischer
  3

• Parse Failures Indexing Error

  #19 opened 4 years ago by danielhneville
  1

• tx_hosts and rx_hosts are mapped backwards

  #21 opened 4 years ago by markoverholser
  2

• Any chance of getting updated mappings up to version v21

  #20 opened 4 years ago by tvfischer
  3

• Is this mapping a superset of official ECS?

  #18 opened 4 years ago by mavam
  1

• Port mappings not working correctly

  #3 opened 4 years ago by philrz
  1

• Out-of-the-box Elasticsearch snags

  #2 opened 4 years ago by philrz
  1

• _path vs. @path

  #1 opened 5 years ago by philrz
  1