elastic / ecs

Elastic Common Schema

https://www.elastic.co/what-is/ecs

elastic/ecs Issues

New Value for event.category: library
Closed 3 months ago
Extend event.kind allowed values to include asset
Updated 3 months ago2
Better abstraction of the type event.kind: alert
Updated 3 months ago
Support cloud events in schema
Updated 4 months ago
Addition of additional allowed values for event.type
Updated 4 months ago
log.offset not ECS compliant?
Updated 4 months ago16
Add event.zone and event.environment fields
Updated 4 months ago
[RFC] Support id in threat.indicator for STIX 2.1
Updated 4 months ago6
Add `related.url` field
Updated 4 months ago
Elastic-Agent Integrations Use of Legacy Mapping Types Impacts .fleet_globals & prevents agents from being upgraded
Updated 5 months ago
Mark experimental fields as `beta` in generated files
Updated 5 months ago
[ECS] Addition - http.request.header.bytes & http.response.header.bytes
Updated 6 months ago2
Add lowercase normaliser to ECS fields which support security incident response process
Updated 6 months ago
Tune container.image.* fields to follow OCI spec
Updated 7 months ago3
Incorrect generated/beats/fields.ecs.yml, not accounting on top_level: false
Closed 7 months ago1
[Proposal] Make event.kind a list
Updated 7 months ago3
Clarify the type of container disk and network metrics
Updated 8 months ago1
Add threat.indicator.tags field
Updated 8 months ago
ECS Vulnerability Published field
Updated 8 months ago
new field set: for log documents themselves
Updated 8 months ago
Create equivalent of ecs-dotnet and ecs-typescript for java
Updated 8 months ago
Generator does not add "ignore_above" property for field type: flattened
Closed 8 months ago
field collisions with organization.id & elastic maintained integrations
Updated 8 months ago
[ci] Pipeline should fail if schema contains invalid field types
Updated 8 months ago
[Discuss] `ignore_above` on `flattened` fields
Updated 8 months ago
Generator does not respect the parameter include_in_parent for nested fields
Closed 9 months ago12
Multiple nested fields are missing from generated yml
Updated 9 months ago1
Typo in changelog for 8.8.0
Closed 10 months ago1
Add ability to capture authentication source
Updated 10 months ago5
Add ECS field for package.vendor to ecs-packages
Updated a year ago1
event.type "access" not allowed for event.category "file"
Closed a year ago1
Add New Vulnerability ECS Fields
Updated a year ago9
Remove mapping for field `faas.trigger`
Closed a year ago3
New geo.division (large), geo.district (medium), and geo.center (small) fields
Updated a year ago2
New `agent.forwarder` for identifying relay and forwarding infrastructure
Updated a year ago
Nest cloud fields under source and destination for additional flexibility
Updated a year ago
The meaning of os.platform is unclear
Updated a year ago1
Support `time_series_metric` attribute in schema and generated artifacts
Updated a year ago
Windows File Shares (Samba): ShareName and RelativeTargetName
Updated a year ago
Minor typo in device.id description
Closed a year ago
New value for `event.category`: `api`
Closed a year ago
Which Fields To Put Session Information Into?
Updated a year ago2
Add "related.email.address" Field to ECS "related" Schema
Updated a year ago
Making all *.name fields be multi-field
Updated a year ago3
Add "*.domain" Fields to ECS "email" Schema
Updated a year ago
Cannot import name 'soft_unicode' from 'markupsafe'
Closed a year ago3
What ECS field should i use to distinguish api types?
Updated a year ago1
host vs obsever
Closed a year ago3
Add support for user_info field in URL field-set
Updated a year ago1
Unambigious ECS field: `client.domain
Closed a year ago1