patterns ecs-v1 to use host.name instead of host.hostname #110200
Labels
:Data Management/Ingest Node
Execution or management of Ingest Pipelines including GeoIP
>enhancement
Team:Data Management
Meta label for data/management team
Description
Feature request also raised in logstash-plugins/logstash-patterns-core#326
At the moment the default patterns coming from ecs-v1 use host.hostname (same is defined for logstash ingest node)
ECS documentation for host list both
host.name
andhost.hostname
However most integrations currently use
host.name
so Kibana visualizations/dashboard tend to use this field causing them not to be usable whenhost.hostname
is usedSuch change is potentially a breaking changes for user who rely on
host.hostname
naming which also need to be addressedWorkaround solutions :
host.name
on elasticsearch ingest node pipeline at ingestion time to have both fields and be able to use common visualizationshost.name
to the indices (and index templates)The text was updated successfully, but these errors were encountered: