Some of the .name fields in ECS are meant to be user-overridable, and to default to the value of another field when not overridden.

I don't think this pattern is expressed clearly enough yet, when this happens. We should try to illustrate this better.

Here are the fields and their "default value" sister field:

• host.name defaults to host.hostname
• agent.name defaults to agent.type
• service.name defaults to service.type