ECS 1.3.0

Schema Changes

Added

• Added vulnerability.* fields to represent vulnerability information. #581
• Added event.ingested as the ingest timestamp. #582
• Added package.reference. #585
• Added package.build_version. #586
• Added package.type. #587
• Added host.domain field. #591
• Added process.command_line. #599
• Added process.exit_code. #600
• Added fields in tls.* to support analysis of TLS protocol events. #606
• Added process.parent.*. #612
• Added process.args_count. #615

Tooling and Artifact Changes

Breaking changes

• Changed the order and column names in the csv. #621
• Removed the file schema.json and the code generating it. #627
• Removed the legacy Elasticsearch template. #629
  • Note: The good Elasticsearch templates are available in directory
    generated/elasticsearch, this PR only removes an obsolete file.

Added

• Added the "Indexed", "Field_Set" and "Description" columns to the csv. #621