Description of the issue:
Compare
|
fields: |
|
- name: answers.class |
With
The first is for the experimental fields, the second is for the standard fields. Looks like the experimental (accidentally?) drops dns.answers -- not sure if there are any other fields like this -- but this one was caught by packetbeat integration tests.
Description of the issue:
Compare
ecs/experimental/generated/beats/fields.ecs.yml
Lines 969 to 970 in 6cbb544
With
ecs/generated/beats/fields.ecs.yml
Lines 986 to 987 in 6cbb544
The first is for the
experimentalfields, the second is for the standard fields. Looks like the experimental (accidentally?) dropsdns.answers-- not sure if there are any other fields like this -- but this one was caught bypacketbeatintegration tests.