Code

[RFC] Wildcard - stage 2 proposal#970

Code

Merged

ebeahan merged 30 commits intoelastic:masterelastic/ecs:masterfrom ebeahan:wildcard-rfc-stage-2ebeahan/ecs:wildcard-rfc-stage-2Copy head branch name to clipboardOct 2, 2020

+371-22

Commits

Commits on Sep 17, 2020

• stage two updates

  ebeahan

  committed
  fb0c6a2

  Copy full SHA for fb0c6a2

• adding wildcard schema files

  ebeahan

  committed
  da4aa73

  Copy full SHA for da4aa73

• add link for stage 2 PR

  ebeahan

  committed
  00eae5b

  Copy full SHA for 00eae5b

• fix links to schema files

  ebeahan

  committed
  e16ed89

  Copy full SHA for e16ed89

• rephrasing

  ebeahan

  committed
  da71db0

  Copy full SHA for da71db0

Commits on Sep 30, 2020

• refactor table for better readability

  ebeahan

  committed
  e5ea69f

  Copy full SHA for e5ea69f

Commits on Oct 1, 2020

• Adjust index globs in query examples

  

  Mathieu Martin

  committed
  e004af7

  Copy full SHA for e004af7

• Migrate same fields for client/server as for source/destination

  

  Mathieu Martin

  committed
  ab338c8

  Copy full SHA for ab338c8

• Don't migrate agent.name but migrate agent.build.original

  

  Mathieu Martin

  committed
  fcbdb87

  Copy full SHA for fcbdb87

• migrate error.type

  

  Mathieu Martin

  committed
  6ac5ecd

  Copy full SHA for 6ac5ecd

• Migrate event.original

  

  Mathieu Martin

  committed
  5e5f443

  Copy full SHA for 5e5f443

• Boldly migrate geo.name. I'm sure some folk capture semi structured custom names

  

  Mathieu Martin

  committed
  145721b

  Copy full SHA for 145721b

• Migrate only host.hostname in the host field set

  

  Mathieu Martin

  committed
  4799175

  Copy full SHA for 4799175

• Don't migrate user.domain

  

  Mathieu Martin

  committed
  f51ecf8

  Copy full SHA for f51ecf8

• Migrate log.logger and log.file.path

  

  Mathieu Martin

  committed
  48e656c

  Copy full SHA for 48e656c

• Migrate organization.name and its cousin that lives in as.*

  

  Mathieu Martin

  committed
  c231e25

  Copy full SHA for c231e25

• Migrate the certificate issuer and subject fields

  

  Mathieu Martin

  committed
  33b4caa

  Copy full SHA for 33b4caa

• Migrate registry.data.strings

  

  Mathieu Martin

  committed
  b984f93

  Copy full SHA for b984f93

• Migrate dns.question.name and dns.answers.data

  

  Mathieu Martin

  committed
  05cad53

  Copy full SHA for 05cad53

• Migrate url.path

  

  Mathieu Martin

  committed
  721d43e

  Copy full SHA for 721d43e

• Adjust the table accordingly

  

  Mathieu Martin

  committed
  43f6c76

  Copy full SHA for 43f6c76

• Add a section about migrating text fields to wildcard

  

  Mathieu Martin

  committed
  e94e8a5

  Copy full SHA for e94e8a5

Commits on Oct 2, 2020

• fix typo

  ebeahan

  committed
  df4f974

  Copy full SHA for df4f974

• add pe.original_file_name

  ebeahan

  committed
  7a4a3e9

  Copy full SHA for 7a4a3e9

• adding request.referrer

  ebeahan

  committed
  560a080

  Copy full SHA for 560a080

• final to file

  ebeahan

  committed
  2ccc1bd

  Copy full SHA for 2ccc1bd

• continue not indexing event.original

  ebeahan

  committed
  34694ac

  Copy full SHA for 34694ac

• Update rfcs/text/0001/pe.yml

  Show description for 688efd9
  

  ebeahan

  and

  webmat

  authored
  688efd9

  Copy full SHA for 688efd9

• typo

  ebeahan

  committed
  497fb50

  Copy full SHA for 497fb50

• setting advancement date

  ebeahan

  committed
  cae4d8b

  Copy full SHA for cae4d8b