Issues
- 0
ECS Tooling - Mapping & Template Settings
#2342 opened by daniel-rhoades - 1
Support cloud events in schema
#2309 opened by thompson-tomo - 0
[Discuss] Add `agent.group` and `host.group` field
#2340 opened by adrianchen-es - 2
Multiple nested fields are missing from generated yml
#2235 opened by P1llus - 0
Add event.zone and event.environment fields
#2306 opened by mbudge - 5
Support multi-key fields from SemConv
#2333 opened by gregkalapos - 0
Add a multi-field user.id.text to the user.id field.
#2336 opened by leandrojmp - 13
ECS can no longer map all components out of the box
#2326 opened by Mpdreamz - 0
Allow risk object to be nested under network.
#2334 opened by willem-dhaese - 5
- 6
[RFC] Support id in threat.indicator for STIX 2.1
#2252 opened by brett-fitz - 0
New Value for event.category: library
#2153 opened by softengchick - 2
Extend event.kind allowed values to include asset
#2173 opened by taylor-swanson - 0
- 0
- 16
log.offset not ECS compliant?
#2234 opened by nicpenning - 0
Add `related.url` field
#2305 opened by chrisberkhout - 0
Elastic-Agent Integrations Use of Legacy Mapping Types Impacts .fleet_globals & prevents agents from being upgraded
#2302 opened by iamhowardtheduck - 0
Mark experimental fields as `beta` in generated files
#2294 opened by ymao1 - 2
- 0
Add lowercase normaliser to ECS fields which support security incident response process
#2287 opened by mbudge - 3
Tune container.image.* fields to follow OCI spec
#2230 opened by ChrsMark - 1
Incorrect generated/beats/fields.ecs.yml, not accounting on top_level: false
#2277 opened by aleksmaus - 3
[Proposal] Make event.kind a list
#2270 opened by andrewkroh - 1
Clarify the type of container disk and network metrics
#2259 opened by ChrsMark - 0
Add threat.indicator.tags field
#2263 opened by mbudge - 0
ECS Vulnerability Published field
#2262 opened by mbudge - 0
new field set: for log documents themselves
#2258 opened by rsk0 - 0
- 0
- 0
- 0
- 0
[Discuss] `ignore_above` on `flattened` fields
#2247 opened by ebeahan - 12
Generator does not respect the parameter include_in_parent for nested fields
#2148 opened by brett-fitz - 1
Typo in changelog for 8.8.0
#2214 opened by wallrik - 5
Add ability to capture authentication source
#2179 opened by bmagistro - 1
Add ECS field for package.vendor to ecs-packages
#2203 opened by epicsilence99 - 1
- 3
Remove mapping for field `faas.trigger`
#2192 opened by gsantoro - 2
New geo.division (large), geo.district (medium), and geo.center (small) fields
#2180 opened by bonifield - 0
- 0
- 1
The meaning of os.platform is unclear
#2177 opened by andrewthad - 0
- 0
- 0
Minor typo in device.id description
#2165 opened by oucsaw - 2
Which Fields To Put Session Information Into?
#2143 opened by mr1716 - 0
- 0
Add "*.domain" Fields to ECS "email" Schema
#2149 opened by MakoWish - 3
Cannot import name 'soft_unicode' from 'markupsafe'
#2142 opened by hrak