Skip to content

Update MongoDB protocol to use ECS fields#10158

Merged
andrewkroh merged 2 commits intoelastic:masterfrom
andrewkroh:feature/pb/mongodb-ecs
Jan 18, 2019
Merged

Update MongoDB protocol to use ECS fields#10158
andrewkroh merged 2 commits intoelastic:masterfrom
andrewkroh:feature/pb/mongodb-ecs

Conversation

@andrewkroh
Copy link
Copy Markdown
Member

That dashboard was updated too.

Here's a summary of what fields changed.

Part of #7968

Changed

  • bytes_in -> source.bytes
  • bytes_out -> destination.bytes
  • responsetime -> event.duration (unit are now nanoseconds)

Added

  • destination
  • event.dataset = mongodb
  • event.end
  • event.start
  • network.bytes
  • network.community_id
  • network.protocol = mongodb
  • network.transport = tcp
  • network.type
  • source

Removed

  • mysql.iserror - It was a boolean that reflected the same information as status which uses OK or Error.

Unchanged Packetbeat Fields

  • method
  • resource
  • query
  • status
  • type = mongodb (we might remove this since we have event.dataset)

That dashboard was updated too.

Here's a summary of what fields changed.

Part of elastic#7968

Changed

- bytes_in -> source.bytes
- bytes_out -> destination.bytes
- responsetime -> event.duration (unit are now nanoseconds)

Added

- destination
- event.dataset = mongodb
- event.end
- event.start
- network.bytes
- network.community_id
- network.protocol = mongodb
- network.transport = tcp
- network.type
- source

Removed

- mysql.iserror - It was a boolean that reflected the same information as `status` which uses OK or Error.

Unchanged Packetbeat Fields

- method
- resource
- query
- status
- type = mongodb (we might remove this since we have event.dataset)
@andrewkroh andrewkroh force-pushed the feature/pb/mongodb-ecs branch from 7adea91 to 6f2219b Compare January 18, 2019 05:11
Copy link
Copy Markdown
Contributor

@webmat webmat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@andrewkroh andrewkroh merged commit 7432509 into elastic:master Jan 18, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants