- Added
pattern
attribute to.mac
fields. #1871 - Add
orchestrator.cluster.id
#1875 - Add
orchestrator.resource.id
#1878
- Add beta
container.*
metric fields. #1789 - Add six new syslog fields to
log.syslog.*
. #1793 - Added
faas.id
,faas.name
andfaas.version
fields as beta. #1796 - Added linux event model beta fields and reuses to support RFC 0030. #1842, #1847, #1884
- Added
threat.feed.dashboard_id
,threat.feed.description
,threat.feed.name
,threat.feed.reference
fields. #1844
email.*
field set now GA. #1794, #1841
- Adding optional field attribute,
pattern
. #1834 - Added support for re-using a fieldset as an array. #1838
- Added
--force-docs
option to generator. #1879
- Update refs from master to main in USAGE.md etc #1658
- Clean up trailing spaces and additional newlines in schemas #1667
- Use higher compression as default in composable index template settings. #1712