Skip to content

Possibly System Integration Mapping Issue #4071

@janniten

Description

@janniten

Hi,
While I was working with some conflicts in data views I found that for logs-system.security the error.code field is mapping as long.
According to the ECS documentation should be keyword (https://www.elastic.co/guide/en/ecs/current/ecs-error.html)
image
I think this is because in the component template logs-system.security@package there is not explicit mapping for error fields
Thanks a lot

Metadata

Metadata

Assignees

No one assigned

    Labels

    Integration:systemSystembugSomething isn't working, use only for issues

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions