You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/reference/ecs-field-reference.md
+13-64Lines changed: 13 additions & 64 deletions
Original file line number
Diff line number
Diff line change
@@ -6,13 +6,15 @@ applies_to:
6
6
serverless: all
7
7
---
8
8
9
+
% This file is automatically generated. Don't edit it manually!
10
+
9
11
# ECS field reference [ecs-field-reference]
10
12
11
13
This is the documentation of ECS version 9.1.0-dev.
12
14
13
15
ECS defines multiple groups of related fields. They are called "field sets". The [Base](/reference/ecs-base.md) field set is the only one whose fields are defined at the root of the event.
14
16
15
-
All other field sets are defined as objects in {{es}}, under which all fields are defined.
17
+
All other field sets are defined as objects in Elasticsearch, under which all fields are defined.
16
18
17
19
For a single page representation of all fields, please see the [generated CSV of fields](https://github.com/elastic/ecs/blob/master/generated/csv/fields.csv).
18
20
@@ -23,38 +25,38 @@ For a single page representation of all fields, please see the [generated CSV of
23
25
| --- | --- |
24
26
|[Base](/reference/ecs-base.md)| All fields defined directly at the root of the events. |
25
27
|[Agent](/reference/ecs-agent.md)| Fields about the monitoring agent. |
26
-
|[Autonomous system](/reference/ecs-as.md)| Fields describing an Autonomous System (Internet routing prefix). |
28
+
|[Autonomous System](/reference/ecs-as.md)| Fields describing an Autonomous System (Internet routing prefix). |
27
29
|[Client](/reference/ecs-client.md)| Fields about the client side of a network connection, used with server. |
28
30
|[Cloud](/reference/ecs-cloud.md)| Fields about the cloud resource. |
29
-
|[Code signature](/reference/ecs-code_signature.md)| These fields contain information about binary code signatures. |
31
+
|[Code Signature](/reference/ecs-code_signature.md)| These fields contain information about binary code signatures. |
30
32
|[Container](/reference/ecs-container.md)| Fields describing the container that generated this event. |
31
-
|[Data stream](/reference/ecs-data_stream.md)| The data_stream fields take part in defining the new data stream naming scheme. |
33
+
|[Data Stream](/reference/ecs-data_stream.md)| The data_stream fields take part in defining the new data stream naming scheme. |
32
34
|[Destination](/reference/ecs-destination.md)| Fields about the destination side of a network connection, used with source. |
33
35
|[Device](/reference/ecs-device.md)| Fields characterizing a (mobile) device a process or application is running on. |
34
36
|[DLL](/reference/ecs-dll.md)| These fields contain information about code libraries dynamically loaded into processes. |
35
37
|[DNS](/reference/ecs-dns.md)| Fields describing DNS queries and answers. |
36
38
|[ECS](/reference/ecs-ecs.md)| Meta-information specific to ECS. |
37
-
|[ELF header](/reference/ecs-elf.md)| These fields contain Linux Executable Linkable Format (ELF) metadata. |
39
+
|[ELF Header](/reference/ecs-elf.md)| These fields contain Linux Executable Linkable Format (ELF) metadata. |
38
40
|[Email](/reference/ecs-email.md)| Describes an email transaction. |
39
41
|[Error](/reference/ecs-error.md)| Fields about errors of any kind. |
40
42
|[Event](/reference/ecs-event.md)| Fields breaking down the event details. |
41
43
|[FaaS](/reference/ecs-faas.md)| Fields describing functions as a service. |
0 commit comments