Skip to content

Allow adding attributes to external field definitions #392

@andrewkroh

Description

@andrewkroh

When importing a field definition using the external field feature I would like to be able to add an attribute to the field's defintion. The use case is to import an external field that is of constant_keyword type and then specify what the value of the field should be for all events.

Here's an example:

- name: data_stream.dataset
  external: ecs
  value: nginx

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions