elastic/ecs

Issues

• Allow use of dash character (`-`) in `data_stream.namespace`

  #2388 opened a month ago by ebeahan
  2

• Dependency Dashboard

  #2357 opened 3 months ago by elastic-renovate-prod
  0

• `data_stream.namespace` description should use byte limit

  #2384 opened a month ago by ebeahan
  0

• LogsDB: Add synthetic_source_keep = none to arrays where order/duplicates do not matter

  #2376 opened 2 months ago by andrewkroh
  1

• Define how semantic convention fields should be mapped

  #2375 opened 2 months ago by felixbarny
  0

• LogsDB compatibility: specify if the ordering of arrays needs to be preserved

  #2372 opened 2 months ago by felixbarny
  3

• Adding new entity/item/object fields for configuration and business changes usecases

  #2371 opened 2 months ago by double-facepalm
  1

• Resolve discrepancy between text subfield handling for `*.name` fields in `ecs@mappings`

  #2353 opened 3 months ago by felixbarny
  11

• Add lowercase normaliser to ECS fields which support security incident response process

  #2287 opened a year ago by mbudge
  1

• Add email.mailfrom.address to email fields

  #2351 opened 3 months ago by mbudge
  0

• Add lowercase normaliser to related fields

  #2349 opened 4 months ago by mbudge
  0

• Add event.zone and event.environment fields

  #2306 opened a year ago by mbudge
  3

• ECS Tooling - Mapping & Template Settings

  #2342 opened 5 months ago by daniel-rhoades
  0

• Support cloud events in schema

  #2309 opened 5 months ago by thompson-tomo
  1

• [Discuss] Add `agent.group` and `host.group` field

  #2340 opened 6 months ago by adrianchen-es
  0

• Multiple nested fields are missing from generated yml

  #2235 opened a year ago by P1llus
  2

• Support multi-key fields from SemConv

  #2333 opened 7 months ago by gregkalapos
  5

• Add a multi-field user.id.text to the user.id field.

  #2336 opened 6 months ago by leandrojmp
  0

• ECS can no longer map all components out of the box

  #2326 opened 7 months ago by Mpdreamz
  13

• Allow risk object to be nested under network.

  #2334 opened 7 months ago by willem-dhaese
  0

• Define a standard way to identify prevention and detection security alerts

  #2329 opened 7 months ago by ferullo
  5

• [RFC] Support id in threat.indicator for STIX 2.1

  #2252 opened 7 months ago by brett-fitz
  6

• Better abstraction of the type event.kind: alert

  #2312 opened 10 months ago by SebastianHuettersen
  0

• Addition of additional allowed values for event.type

  #2308 opened 10 months ago by thompson-tomo
  0

• log.offset not ECS compliant?

  #2234 opened a year ago by nicpenning
  16

• Add `related.url` field

  #2305 opened a year ago by chrisberkhout
  0

• Elastic-Agent Integrations Use of Legacy Mapping Types Impacts .fleet_globals & prevents agents from being upgraded

  #2302 opened a year ago by iamhowardtheduck
  0

• Mark experimental fields as `beta` in generated files

  #2294 opened a year ago by ymao1
  0

• [ECS] Addition - http.request.header.bytes & http.response.header.bytes

  #2280 opened a year ago by ScottElastic
  2

• Tune container.image.* fields to follow OCI spec

  #2230 opened a year ago by ChrsMark
  3

• Incorrect generated/beats/fields.ecs.yml, not accounting on top_level: false

  #2277 opened a year ago by aleksmaus
  1

• [Proposal] Make event.kind a list

  #2270 opened a year ago by andrewkroh
  3

• Clarify the type of container disk and network metrics

  #2259 opened a year ago by ChrsMark
  1

• Add threat.indicator.tags field

  #2263 opened a year ago by mbudge
  0

• ECS Vulnerability Published field

  #2262 opened a year ago by mbudge
  0

• new field set: for log documents themselves

  #2258 opened a year ago by rsk0
  0

• Create equivalent of ecs-dotnet and ecs-typescript for java

  #2257 opened a year ago by Fr33Radical
  0

• Generator does not add "ignore_above" property for field type: flattened

  #2237 opened a year ago by brett-fitz
  0

• field collisions with organization.id & elastic maintained integrations

  #2250 opened a year ago by neu5ron
  0

• [ci] Pipeline should fail if schema contains invalid field types

  #2249 opened a year ago by ebeahan
  0

• [Discuss] `ignore_above` on `flattened` fields

  #2247 opened a year ago by ebeahan
  0

• Typo in changelog for 8.8.0

  #2214 opened a year ago by wallrik
  1

• Add ability to capture authentication source

  #2179 opened 2 years ago by bmagistro
  5

• Add ECS field for package.vendor to ecs-packages

  #2203 opened 2 years ago by epicsilence99
  1

• event.type "access" not allowed for event.category "file"

  #2207 opened a year ago by taylor-swanson
  1

• Remove mapping for field `faas.trigger`

  #2192 opened 2 years ago by gsantoro
  3

• New geo.division (large), geo.district (medium), and geo.center (small) fields

  #2180 opened 2 years ago by bonifield
  2

• New `agent.forwarder` for identifying relay and forwarding infrastructure

  #2190 opened 2 years ago by bonifield
  0

• Nest cloud fields under source and destination for additional flexibility

  #2189 opened 2 years ago by bonifield
  0

• The meaning of os.platform is unclear

  #2177 opened 2 years ago by andrewthad
  1