ECS 1.10.0
A handful of new additions from the ECS RFC process are included in this release:
- The host metrics RFC has advanced to Finished status with host metrics fields becoming GA.
- The orchestrator fieldset RFC has advanced to Stage 3, and the fieldset has been released for beta.
- The
data_stream
fields moved to Stage 2, and are released for beta. - We are extending the existing `threat.* fields, which are released as experimental.
In addition to RFC proposed changes, ECS 1.10.0 also adds some documentation updates, including the ability to add a short_override
to field reuses for a custom description.
Finally, there is now support for flattened and nested types in the Go code generator script.
Changelog
Schema Changes
Added
- Add
data_stream
fieldset. #1307 - Add
orchestrator
fieldset as beta fields. #1326 - Extend
threat.*
experimental fields with proposed changes from RFC 0018. #1344, #1351 - Allow custom descriptions for self-nesting reuses via
short_override
#1366
Improvements
- Updated descriptions to use Elastic Security #1305
- Host metrics fields from RFC 0005 are now GA. #1319
- Adjustments to the field set "usage" docs #1345
- Adjustments to the sidebar naming convention for usage and examples docs #1354
- Update
user.*
field reuse descriptions. #1382
Tooling and Artifact Changes
Bugfixes
- Correcting fieldset name capitalization for generated ES template #1323