You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
However most integrations currently use host.name so Kibana visualizations/dashboard tend to use this field causing them not to be usable when host.hostname is used
Workaround solutions :
add a second field host.name on logstash pipeline (or elasticsearch ingest node pipeline) at ingestion time to have both fields and be able to use common visualizations
add a runtime field to add host.name to the indices (and index templates)
The text was updated successfully, but these errors were encountered:
At the moment the default patterns coming from ecs-v1 use host.hostname (same is defined for elasticsearch ingest node)
ECS documentation for host list both
host.name
andhost.hostname
However most integrations currently use
host.name
so Kibana visualizations/dashboard tend to use this field causing them not to be usable whenhost.hostname
is usedWorkaround solutions :
host.name
on logstash pipeline (or elasticsearch ingest node pipeline) at ingestion time to have both fields and be able to use common visualizationshost.name
to the indices (and index templates)The text was updated successfully, but these errors were encountered: