Skip to content

Update Memcache protocol to use ECS fields#10189

Merged
andrewkroh merged 1 commit intoelastic:masterfrom
andrewkroh:feature/pb/memcached
Jan 21, 2019
Merged

Update Memcache protocol to use ECS fields#10189
andrewkroh merged 1 commit intoelastic:masterfrom
andrewkroh:feature/pb/memcached

Conversation

@andrewkroh
Copy link
Copy Markdown
Member

Here's a summary of what fields changed.

Part of #7968

Changed

  • bytes_in -> source.bytes
  • bytes_out -> destination.bytes
  • responsetime -> event.duration (unit are now nanoseconds)
  • transport -> network.transport = udp or tcp

Added

  • destination
  • event.dataset = memcache
  • event.end
  • event.start
  • network.bytes
  • network.community_id
  • network.protocol = memcache
  • network.type
  • source

Unchanged Packetbeat Fields

  • status
  • type = memcache (we might remove this since we have event.dataset)

Here's a summary of what fields changed.

Part of elastic#7968

Changed

- bytes_in -> source.bytes
- bytes_out -> destination.bytes
- responsetime -> event.duration (unit are now nanoseconds)
- transport -> network.transport = udp or tcp

Added

- destination
- event.dataset = memcache
- event.end
- event.start
- network.bytes
- network.community_id
- network.protocol = memcache
- network.type
- source

Unchanged Packetbeat Fields

- status
- type = memcache (we might remove this since we have event.dataset)
@andrewkroh andrewkroh force-pushed the feature/pb/memcached branch from e27ee9c to 2956b5b Compare January 18, 2019 23:25
Copy link
Copy Markdown
Contributor

@webmat webmat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems pretty straightforward.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants