Skip to content

Update MySQL protocol to use ECS fields#10155

Merged
andrewkroh merged 2 commits intoelastic:masterfrom
andrewkroh:feature/pb/mysql-ecs
Jan 18, 2019
Merged

Update MySQL protocol to use ECS fields#10155
andrewkroh merged 2 commits intoelastic:masterfrom
andrewkroh:feature/pb/mysql-ecs

Conversation

@andrewkroh
Copy link
Copy Markdown
Member

That dashboard was updated too.

Here's a summary of what fields changed.

Part of #7968

Changed

  • bytes_in -> source.bytes
  • bytes_out -> destination.bytes
  • notes -> error.message
  • responsetime -> event.duration (unit are now nanoseconds)

Added

  • destination
  • event.dataset = mysql
  • event.end
  • event.start
  • network.bytes
  • network.community_id
  • network.protocol = mysql
  • network.transport = tcp
  • network.type
  • source

Removed

  • mysql.iserror - It was a boolean that reflected the same information as status which uses OK or Error.

Unchanged Packetbeat Fields

  • method
  • query
  • params
  • path
  • status
  • type = mysql (we might remove this since we have event.dataset)

That dashboard was updated too.

Here's a summary of what fields changed.

Part of elastic#7968

Changed

- bytes_in -> source.bytes
- bytes_out -> destination.bytes
- notes -> error.message
- responsetime -> event.duration (unit are now nanoseconds)

Added

- destination
- event.dataset = mysql
- event.end
- event.start
- network.bytes
- network.community_id
- network.protocol = mysql
- network.transport = tcp
- network.type
- source

Removed

- mysql.iserror - It was a boolean that reflected the same information as `status` which uses OK or Error.

Unchanged Packetbeat Fields

- method
- query
- params
- path
- status
- type = mysql (we might remove this since we have event.dataset)
@andrewkroh andrewkroh force-pushed the feature/pb/mysql-ecs branch from 4b7e501 to 50acf0e Compare January 18, 2019 04:13
Copy link
Copy Markdown
Contributor

@webmat webmat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@andrewkroh andrewkroh merged commit 3bed23c into elastic:master Jan 18, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants