Remove deprecated fields from v9.x (#2410)

Remove deprecated fields from the previous major release: * process.parent.pgid * process.pgid * service.node.role * service.origin.node.role * service.target.node.role
elastic · Feb 4, 2025 · ede6f40 · ede6f40
1 parent 9ed5109
commit ede6f40
Show file tree

Hide file tree

Showing 17 changed files with 3 additions and 202 deletions.
diff --git a/CHANGELOG.next.md b/CHANGELOG.next.md
@@ -12,6 +12,8 @@ Thanks, you're awesome :-) -->
 
 #### Breaking changes
 
+* Remove deprecated fields from previous major release; `process.pgid`, `service.node.role`, and inherited users. #2410
+
 #### Bugfixes
 
 * Fix link rendering issues and usage of http in links. #2423

diff --git a/docs/fields/field-details.asciidoc b/docs/fields/field-details.asciidoc
@@ -8624,24 +8624,6 @@ Multi-fields:
 
 example: `ssh`
 
-| extended
-
-// ===============================================================
-
-|
-[[field-process-pgid]]
-<<field-process-pgid, process.pgid>>
-
-a| Deprecated for removal in next major version release. This field is superseded by `process.group_leader.pid`.
-
-Identifier of the group of processes the process belongs to.
-
-type: long
-
-
-
-
-
 | extended
 
 // ===============================================================

diff --git a/docs/opentelemetry/otel-mapping-summary.asciidoc b/docs/opentelemetry/otel-mapping-summary.asciidoc
@@ -815,7 +815,7 @@ h| Namespace
 
 
 | Process
-^| <<ecs-process,37>>
+^| <<ecs-process,36>>
 ^| https://opentelemetry.io/docs/specs/semconv/attributes-registry/process[33]
 ^| 15
 ^| 2

diff --git a/experimental/generated/beats/fields.ecs.yml b/experimental/generated/beats/fields.ecs.yml
@@ -6897,15 +6897,6 @@
       format: string
       description: PE Section List virtual size. This is always the same as `physical_size`.
       default_field: false
-    - name: parent.pgid
-      level: extended
-      type: long
-      format: string
-      description: 'Deprecated for removal in next major version release. This field
-        is superseded by `process.group_leader.pid`.
-
-        Identifier of the group of processes the process belongs to.'
-      default_field: false
     - name: parent.pid
       level: core
       type: long
@@ -7269,14 +7260,6 @@
       format: string
       description: PE Section List virtual size. This is always the same as `physical_size`.
       default_field: false
-    - name: pgid
-      level: extended
-      type: long
-      format: string
-      description: 'Deprecated for removal in next major version release. This field
-        is superseded by `process.group_leader.pid`.
-
-        Identifier of the group of processes the process belongs to.'
     - name: pid
       level: core
       type: long

diff --git a/experimental/generated/csv/fields.csv b/experimental/generated/csv/fields.csv
@@ -884,7 +884,6 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description
 9.0.0-dev+exp,true,process,process.parent.pe.sections.physical_size,long,extended,,,PE Section List physical size.
 9.0.0-dev+exp,true,process,process.parent.pe.sections.var_entropy,long,extended,,,Variance for Shannon entropy calculation from the section.
 9.0.0-dev+exp,true,process,process.parent.pe.sections.virtual_size,long,extended,,,PE Section List virtual size. This is always the same as `physical_size`.
-9.0.0-dev+exp,true,process,process.parent.pgid,long,extended,,,Deprecated identifier of the group of processes the process belongs to.
 9.0.0-dev+exp,true,process,process.parent.pid,long,core,,4242,Process id.
 9.0.0-dev+exp,true,process,process.parent.real_group.id,keyword,extended,,,Unique identifier for the group on the system/platform.
 9.0.0-dev+exp,true,process,process.parent.real_group.name,keyword,extended,,,Name of the group.
@@ -938,7 +937,6 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description
 9.0.0-dev+exp,true,process,process.pe.sections.physical_size,long,extended,,,PE Section List physical size.
 9.0.0-dev+exp,true,process,process.pe.sections.var_entropy,long,extended,,,Variance for Shannon entropy calculation from the section.
 9.0.0-dev+exp,true,process,process.pe.sections.virtual_size,long,extended,,,PE Section List virtual size. This is always the same as `physical_size`.
-9.0.0-dev+exp,true,process,process.pgid,long,extended,,,Deprecated identifier of the group of processes the process belongs to.
 9.0.0-dev+exp,true,process,process.pid,long,core,,4242,Process id.
 9.0.0-dev+exp,true,process,process.previous.args,keyword,extended,array,"[""/usr/bin/ssh"", ""-l"", ""user"", ""10.0.0.16""]",Array of process arguments.
 9.0.0-dev+exp,true,process,process.previous.args_count,long,extended,,4,Length of the process.args array.

diff --git a/experimental/generated/ecs/ecs_flat.yml b/experimental/generated/ecs/ecs_flat.yml
@@ -11631,20 +11631,6 @@ process.parent.pe.sections.virtual_size:
   original_fieldset: pe
   short: PE Section List virtual size. This is always the same as `physical_size`.
   type: long
-process.parent.pgid:
-  dashed_name: process-parent-pgid
-  description: 'Deprecated for removal in next major version release. This field is
-    superseded by `process.group_leader.pid`.
-
-    Identifier of the group of processes the process belongs to.'
-  flat_name: process.parent.pgid
-  format: string
-  level: extended
-  name: pgid
-  normalize: []
-  original_fieldset: process
-  short: Deprecated identifier of the group of processes the process belongs to.
-  type: long
 process.parent.pid:
   dashed_name: process-parent-pid
   description: Process id.
@@ -12260,19 +12246,6 @@ process.pe.sections.virtual_size:
   original_fieldset: pe
   short: PE Section List virtual size. This is always the same as `physical_size`.
   type: long
-process.pgid:
-  dashed_name: process-pgid
-  description: 'Deprecated for removal in next major version release. This field is
-    superseded by `process.group_leader.pid`.
-
-    Identifier of the group of processes the process belongs to.'
-  flat_name: process.pgid
-  format: string
-  level: extended
-  name: pgid
-  normalize: []
-  short: Deprecated identifier of the group of processes the process belongs to.
-  type: long
 process.pid:
   dashed_name: process-pid
   description: Process id.

diff --git a/experimental/generated/ecs/ecs_nested.yml b/experimental/generated/ecs/ecs_nested.yml
@@ -13917,20 +13917,6 @@ process:
       original_fieldset: pe
       short: PE Section List virtual size. This is always the same as `physical_size`.
       type: long
-    process.parent.pgid:
-      dashed_name: process-parent-pgid
-      description: 'Deprecated for removal in next major version release. This field
-        is superseded by `process.group_leader.pid`.
-
-        Identifier of the group of processes the process belongs to.'
-      flat_name: process.parent.pgid
-      format: string
-      level: extended
-      name: pgid
-      normalize: []
-      original_fieldset: process
-      short: Deprecated identifier of the group of processes the process belongs to.
-      type: long
     process.parent.pid:
       dashed_name: process-parent-pid
       description: Process id.
@@ -14547,19 +14533,6 @@ process:
       original_fieldset: pe
       short: PE Section List virtual size. This is always the same as `physical_size`.
       type: long
-    process.pgid:
-      dashed_name: process-pgid
-      description: 'Deprecated for removal in next major version release. This field
-        is superseded by `process.group_leader.pid`.
-
-        Identifier of the group of processes the process belongs to.'
-      flat_name: process.pgid
-      format: string
-      level: extended
-      name: pgid
-      normalize: []
-      short: Deprecated identifier of the group of processes the process belongs to.
-      type: long
     process.pid:
       dashed_name: process-pid
       description: Process id.

diff --git a/experimental/generated/elasticsearch/composable/component/process.json b/experimental/generated/elasticsearch/composable/component/process.json
@@ -1258,9 +1258,6 @@
                     }
                   }
                 },
-                "pgid": {
-                  "type": "long"
-                },
                 "pid": {
                   "type": "long"
                 },
@@ -1506,9 +1503,6 @@
                 }
               }
             },
-            "pgid": {
-              "type": "long"
-            },
             "pid": {
               "type": "long"
             },

diff --git a/experimental/generated/elasticsearch/legacy/template.json b/experimental/generated/elasticsearch/legacy/template.json
@@ -4020,9 +4020,6 @@
                   }
                 }
               },
-              "pgid": {
-                "type": "long"
-              },
               "pid": {
                 "type": "long"
               },
@@ -4268,9 +4265,6 @@
               }
             }
           },
-          "pgid": {
-            "type": "long"
-          },
           "pid": {
             "type": "long"
           },

diff --git a/generated/beats/fields.ecs.yml b/generated/beats/fields.ecs.yml
@@ -6847,15 +6847,6 @@
       format: string
       description: PE Section List virtual size. This is always the same as `physical_size`.
       default_field: false
-    - name: parent.pgid
-      level: extended
-      type: long
-      format: string
-      description: 'Deprecated for removal in next major version release. This field
-        is superseded by `process.group_leader.pid`.
-
-        Identifier of the group of processes the process belongs to.'
-      default_field: false
     - name: parent.pid
       level: core
       type: long
@@ -7219,14 +7210,6 @@
       format: string
       description: PE Section List virtual size. This is always the same as `physical_size`.
       default_field: false
-    - name: pgid
-      level: extended
-      type: long
-      format: string
-      description: 'Deprecated for removal in next major version release. This field
-        is superseded by `process.group_leader.pid`.
-
-        Identifier of the group of processes the process belongs to.'
     - name: pid
       level: core
       type: long

diff --git a/generated/csv/fields.csv b/generated/csv/fields.csv
@@ -877,7 +877,6 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description
 9.0.0-dev,true,process,process.parent.pe.sections.physical_size,long,extended,,,PE Section List physical size.
 9.0.0-dev,true,process,process.parent.pe.sections.var_entropy,long,extended,,,Variance for Shannon entropy calculation from the section.
 9.0.0-dev,true,process,process.parent.pe.sections.virtual_size,long,extended,,,PE Section List virtual size. This is always the same as `physical_size`.
-9.0.0-dev,true,process,process.parent.pgid,long,extended,,,Deprecated identifier of the group of processes the process belongs to.
 9.0.0-dev,true,process,process.parent.pid,long,core,,4242,Process id.
 9.0.0-dev,true,process,process.parent.real_group.id,keyword,extended,,,Unique identifier for the group on the system/platform.
 9.0.0-dev,true,process,process.parent.real_group.name,keyword,extended,,,Name of the group.
@@ -931,7 +930,6 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description
 9.0.0-dev,true,process,process.pe.sections.physical_size,long,extended,,,PE Section List physical size.
 9.0.0-dev,true,process,process.pe.sections.var_entropy,long,extended,,,Variance for Shannon entropy calculation from the section.
 9.0.0-dev,true,process,process.pe.sections.virtual_size,long,extended,,,PE Section List virtual size. This is always the same as `physical_size`.
-9.0.0-dev,true,process,process.pgid,long,extended,,,Deprecated identifier of the group of processes the process belongs to.
 9.0.0-dev,true,process,process.pid,long,core,,4242,Process id.
 9.0.0-dev,true,process,process.previous.args,keyword,extended,array,"[""/usr/bin/ssh"", ""-l"", ""user"", ""10.0.0.16""]",Array of process arguments.
 9.0.0-dev,true,process,process.previous.args_count,long,extended,,4,Length of the process.args array.

diff --git a/generated/ecs/ecs_flat.yml b/generated/ecs/ecs_flat.yml
@@ -11562,20 +11562,6 @@ process.parent.pe.sections.virtual_size:
   original_fieldset: pe
   short: PE Section List virtual size. This is always the same as `physical_size`.
   type: long
-process.parent.pgid:
-  dashed_name: process-parent-pgid
-  description: 'Deprecated for removal in next major version release. This field is
-    superseded by `process.group_leader.pid`.
-
-    Identifier of the group of processes the process belongs to.'
-  flat_name: process.parent.pgid
-  format: string
-  level: extended
-  name: pgid
-  normalize: []
-  original_fieldset: process
-  short: Deprecated identifier of the group of processes the process belongs to.
-  type: long
 process.parent.pid:
   dashed_name: process-parent-pid
   description: Process id.
@@ -12191,19 +12177,6 @@ process.pe.sections.virtual_size:
   original_fieldset: pe
   short: PE Section List virtual size. This is always the same as `physical_size`.
   type: long
-process.pgid:
-  dashed_name: process-pgid
-  description: 'Deprecated for removal in next major version release. This field is
-    superseded by `process.group_leader.pid`.
-
-    Identifier of the group of processes the process belongs to.'
-  flat_name: process.pgid
-  format: string
-  level: extended
-  name: pgid
-  normalize: []
-  short: Deprecated identifier of the group of processes the process belongs to.
-  type: long
 process.pid:
   dashed_name: process-pid
   description: Process id.

diff --git a/generated/ecs/ecs_nested.yml b/generated/ecs/ecs_nested.yml
@@ -13837,20 +13837,6 @@ process:
       original_fieldset: pe
       short: PE Section List virtual size. This is always the same as `physical_size`.
       type: long
-    process.parent.pgid:
-      dashed_name: process-parent-pgid
-      description: 'Deprecated for removal in next major version release. This field
-        is superseded by `process.group_leader.pid`.
-
-        Identifier of the group of processes the process belongs to.'
-      flat_name: process.parent.pgid
-      format: string
-      level: extended
-      name: pgid
-      normalize: []
-      original_fieldset: process
-      short: Deprecated identifier of the group of processes the process belongs to.
-      type: long
     process.parent.pid:
       dashed_name: process-parent-pid
       description: Process id.
@@ -14467,19 +14453,6 @@ process:
       original_fieldset: pe
       short: PE Section List virtual size. This is always the same as `physical_size`.
       type: long
-    process.pgid:
-      dashed_name: process-pgid
-      description: 'Deprecated for removal in next major version release. This field
-        is superseded by `process.group_leader.pid`.
-
-        Identifier of the group of processes the process belongs to.'
-      flat_name: process.pgid
-      format: string
-      level: extended
-      name: pgid
-      normalize: []
-      short: Deprecated identifier of the group of processes the process belongs to.
-      type: long
     process.pid:
       dashed_name: process-pid
       description: Process id.

diff --git a/generated/elasticsearch/composable/component/process.json b/generated/elasticsearch/composable/component/process.json
@@ -1258,9 +1258,6 @@
                     }
                   }
                 },
-                "pgid": {
-                  "type": "long"
-                },
                 "pid": {
                   "type": "long"
                 },
@@ -1506,9 +1503,6 @@
                 }
               }
             },
-            "pgid": {
-              "type": "long"
-            },
             "pid": {
               "type": "long"
             },

diff --git a/generated/elasticsearch/legacy/template.json b/generated/elasticsearch/legacy/template.json
@@ -3978,9 +3978,6 @@
                   }
                 }
               },
-              "pgid": {
-                "type": "long"
-              },
               "pid": {
                 "type": "long"
               },
@@ -4226,9 +4223,6 @@
               }
             }
           },
-          "pgid": {
-            "type": "long"
-          },
           "pid": {
             "type": "long"
           },

diff --git a/schemas/process.yml b/schemas/process.yml
@@ -138,17 +138,6 @@
         - type: match_only_text
           name: text
 
-    - name: pgid
-      format: string
-      level: extended
-      type: long
-      short: Deprecated identifier of the group of processes the process belongs to.
-      description: >
-        Deprecated for removal in next major version release. This field is superseded by
-        `process.group_leader.pid`.
-
-        Identifier of the group of processes the process belongs to.
-
     - name: command_line
       level: extended
       type: wildcard