Skip to content

Update AMQP protocol to use ECS fields#10090

Merged
andrewkroh merged 2 commits intoelastic:masterfrom
andrewkroh:feature/pb/amqp-ecs
Jan 16, 2019
Merged

Update AMQP protocol to use ECS fields#10090
andrewkroh merged 2 commits intoelastic:masterfrom
andrewkroh:feature/pb/amqp-ecs

Conversation

@andrewkroh
Copy link
Copy Markdown
Member

There are no dashboards to update.

Here's a summary of what fields changed.

Part of #7968

Changed

  • bytes_in -> source.bytes
  • bytes_out -> destination.bytes
  • responsetime -> event.duration
  • notes -> error.message

Added

  • client
  • server
  • event.dataset = amqp
  • event.start
  • event.end
  • network.bytes
  • network.community_id
  • network.protocol = dhcpv4
  • network.transport = tcp
  • network.type

Unchanged Packetbeat Fields

  • method
  • status
  • type = amqp (we might remove this since we have event.dataset)
  • request
  • response

There are no dashboards to update.

Here's a summary of what fields changed.

Part of elastic#7968

Changed

- bytes_in -> source.bytes
- bytes_out -> destination.bytes
- responsetime -> event.duration
- notes -> error.message

Added

- client
- server
- event.dataset = amqp
- event.start
- event.end
- network.bytes
- network.community_id
- network.protocol = dhcpv4
- network.transport = tcp
- network.type

Unchanged Packetbeat Fields

- method
- status
- type = amqp (we might remove this since we have event.dataset)
- request
- response
Copy link
Copy Markdown
Contributor

@ruflin ruflin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

I assume here it's the same that all these fields are already in the migration yml.

@andrewkroh andrewkroh merged commit 1acbfdb into elastic:master Jan 16, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants