Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Filebeat] Improve ECS categorization field mappings in logstash module #16668

Merged
merged 2 commits into from
Mar 6, 2020

Conversation

leehinman
Copy link
Contributor

@leehinman leehinman commented Feb 27, 2020

  • event.kind
  • event.type
  • convert pipeline to yaml

Closes #16169

@leehinman leehinman added enhancement Filebeat Filebeat needs_backport PR is waiting to be backported to other branches. Team:SIEM ecs labels Feb 27, 2020
@leehinman leehinman requested a review from a team as a code owner February 27, 2020 17:00
@elasticmachine
Copy link
Collaborator

Pinging @elastic/siem (Team:SIEM)

- event.kind
- event.type
- convert pipeline to yaml

Closes elastic#16169
Copy link
Member

@andrewkroh andrewkroh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@leehinman leehinman merged commit 8e8da46 into elastic:master Mar 6, 2020
@leehinman leehinman deleted the 16169_logstash_ecs_1.4 branch March 6, 2020 14:42
leehinman added a commit to leehinman/beats that referenced this pull request Mar 6, 2020
…#16668)

- event.kind
- event.type
- convert pipeline to yaml

Closes elastic#16169

(cherry picked from commit 8e8da46)
leehinman added a commit that referenced this pull request Mar 6, 2020
…#16875)

- event.kind
- event.type
- convert pipeline to yaml

Closes #16169

(cherry picked from commit 8e8da46)
@andrewkroh andrewkroh removed the needs_backport PR is waiting to be backported to other branches. label May 6, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Filebeat] Upgrade logstash module to ECS 1.4
3 participants