## ECS 1.11 Changes ### Added - elf.* field set added as beta. elastic/ecs#1410 - Remove beta from orchestrator field set. elastic/ecs#1417 - Extend threat.* field set beta. elastic/ecs#1438 - Added event.agent_id_status field. elastic/ecs#1454 - process.target and process.target.parent added to experimental schema. elastic/ecs#1467 - Threat indicator fields progress to beta stage. elastic/ecs#1471, elastic/ecs#1504 - threat.enrichments beta fields. elastic/ecs#1478, elastic/ecs#1504 ### Deprecated - Note deprecation of the host.user.* field reuse. elastic/ecs#1422 - Note deprecation of log.original superseded by event.original elastic/ecs#1469
ECS 1.11 Changes
Added
elfheader ecs#1410orchestratorfield set ecs#1417threat.*field set ecs#1438process.targetfield reuse ecs#1467Deprecated
host.user.*deprecation notice in field reuse description ecs#1422