This module was migrated prior to ECS 1.0.0-beta2, and therefore has a few things left to migrate.

Caveats

• haproxy.bytes_read: Both the TCP logs and the HTTP logs use the field. So it's copied to http.response.bytes when parsing HTTP logs, but not when parsing TCP logs.

Renames

• haproxy.http.response.status_code => http.response.status_code

Different scale, original fields still present:

• haproxy.http.request.time_active_ms => event.duration
• haproxy.tcp.processing_time_ms => event.duration

Note that haproxy.client.ip is migrated in #10141

TODO

• Alias renamed fields to their ECS counterpart, not forgetting migration: true
• Document field migrations in ecs-migration.yml
• Changelog