Skip to content

[microsoft_dhcp] Format observer.mac per ECS #3300

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
andrewkroh merged 6 commits into from
May 10, 2022
Merged

[microsoft_dhcp] Format observer.mac per ECS #3300

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
798ae25
Sort ecs.yml
andrewkroh May 9, 2022
a378835
Add missing event field mappings
andrewkroh May 9, 2022
5d5540a
Format observer.mac field
andrewkroh May 9, 2022
82c2214
Update sample event
andrewkroh May 9, 2022
eb53335
Update generated readme
andrewkroh May 9, 2022
382fab7
Add changelog
andrewkroh May 9, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
Sort ecs.yml 
[git-generate]
cd packages/microsoft_dhcp
yq -i '. | sort_by(.name) | sort_keys(..)' data_stream/log/fields/ecs.yml
  • Loading branch information
@andrewkroh
andrewkroh committed May 9, 2022
commit 798ae25883151c817ef4f7f0216e184ffebab2a2
68 changes: 34 additions & 34 deletions packages/microsoft_dhcp/data_stream/log/fields/ecs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,34 +1,34 @@
- name: ecs.version
external: ecs
- name: message
external: ecs
- name: tags
external: ecs
- name: event.action
external: ecs
- name: event.ingested
external: ecs
- name: event.original
external: ecs
- name: event.kind
external: ecs
- name: event.code
external: ecs
- name: event.timezone
external: ecs
- name: host.ip
external: ecs
- name: host.domain
external: ecs
- name: host.mac
external: ecs
- name: observer.hostname
external: ecs
- name: observer.ip
external: ecs
- name: observer.mac
external: ecs
- name: user.name
external: ecs
- name: log.file.path
external: ecs
- external: ecs
name: ecs.version
- external: ecs
name: event.action
- external: ecs
name: event.code
- external: ecs
name: event.ingested
- external: ecs
name: event.kind
- external: ecs
name: event.original
- external: ecs
name: event.timezone
- external: ecs
name: host.domain
- external: ecs
name: host.ip
- external: ecs
name: host.mac
- external: ecs
name: log.file.path
- external: ecs
name: message
- external: ecs
name: observer.hostname
- external: ecs
name: observer.ip
- external: ecs
name: observer.mac
- external: ecs
name: tags
- external: ecs
name: user.name