Skip to content

Fill in known type and dataset value into fields.yml #226

@ruflin

Description

@ruflin

For most datasets inside a package, we know in advance the type and the dataset value. But currently we do not publish it in the fields.yml: https://github.com/elastic/integrations/blob/master/packages/nginx/dataset/access/fields/base-fields.yml#L1 Instead this could look as following:

- name: data_stream.type
  type: constant_keyword
  description: Data stream type.
  value: log
- name: data_stream.dataset
  type: constant_keyword
  description: Data stream dataset.
  value: nginx.access

The benefit of prepopulating is that it would ensure no wrong values get put into it and if incompatible data already exists, Ingest Manager would rollover the data stream when the package is installed.

An alternative idea is that Ingest Manager adds it as all the info already exists in the manifest.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions