diff --git a/CHANGELOG.next.md b/CHANGELOG.next.md index f3d3f6601b..3a6eaff847 100644 --- a/CHANGELOG.next.md +++ b/CHANGELOG.next.md @@ -12,6 +12,8 @@ Thanks, you're awesome :-) --> #### Breaking changes +* Remove deprecated fields from previous major release; `process.pgid`, `service.node.role`, and inherited users. #2410 + #### Bugfixes * Fix link rendering issues and usage of http in links. #2423 diff --git a/docs/fields/field-details.asciidoc b/docs/fields/field-details.asciidoc index 987b7b6393..fee551b9ad 100644 --- a/docs/fields/field-details.asciidoc +++ b/docs/fields/field-details.asciidoc @@ -8624,24 +8624,6 @@ Multi-fields: example: `ssh` -| extended - -// =============================================================== - -| -[[field-process-pgid]] -<> - -a| Deprecated for removal in next major version release. This field is superseded by `process.group_leader.pid`. - -Identifier of the group of processes the process belongs to. - -type: long - - - - - | extended // =============================================================== diff --git a/docs/opentelemetry/otel-mapping-summary.asciidoc b/docs/opentelemetry/otel-mapping-summary.asciidoc index 6083c4861a..342601e1b7 100644 --- a/docs/opentelemetry/otel-mapping-summary.asciidoc +++ b/docs/opentelemetry/otel-mapping-summary.asciidoc @@ -815,7 +815,7 @@ h| Namespace | Process -^| <> +^| <> ^| https://opentelemetry.io/docs/specs/semconv/attributes-registry/process[33] ^| 15 ^| 2 diff --git a/experimental/generated/beats/fields.ecs.yml b/experimental/generated/beats/fields.ecs.yml index fdb929ed56..fd704c9e3b 100644 --- a/experimental/generated/beats/fields.ecs.yml +++ b/experimental/generated/beats/fields.ecs.yml @@ -6897,15 +6897,6 @@ format: string description: PE Section List virtual size. This is always the same as `physical_size`. default_field: false - - name: parent.pgid - level: extended - type: long - format: string - description: 'Deprecated for removal in next major version release. This field - is superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - default_field: false - name: parent.pid level: core type: long @@ -7269,14 +7260,6 @@ format: string description: PE Section List virtual size. This is always the same as `physical_size`. default_field: false - - name: pgid - level: extended - type: long - format: string - description: 'Deprecated for removal in next major version release. This field - is superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - name: pid level: core type: long diff --git a/experimental/generated/csv/fields.csv b/experimental/generated/csv/fields.csv index 2f73b45091..a851e99808 100644 --- a/experimental/generated/csv/fields.csv +++ b/experimental/generated/csv/fields.csv @@ -884,7 +884,6 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description 9.0.0-dev+exp,true,process,process.parent.pe.sections.physical_size,long,extended,,,PE Section List physical size. 9.0.0-dev+exp,true,process,process.parent.pe.sections.var_entropy,long,extended,,,Variance for Shannon entropy calculation from the section. 9.0.0-dev+exp,true,process,process.parent.pe.sections.virtual_size,long,extended,,,PE Section List virtual size. This is always the same as `physical_size`. -9.0.0-dev+exp,true,process,process.parent.pgid,long,extended,,,Deprecated identifier of the group of processes the process belongs to. 9.0.0-dev+exp,true,process,process.parent.pid,long,core,,4242,Process id. 9.0.0-dev+exp,true,process,process.parent.real_group.id,keyword,extended,,,Unique identifier for the group on the system/platform. 9.0.0-dev+exp,true,process,process.parent.real_group.name,keyword,extended,,,Name of the group. @@ -938,7 +937,6 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description 9.0.0-dev+exp,true,process,process.pe.sections.physical_size,long,extended,,,PE Section List physical size. 9.0.0-dev+exp,true,process,process.pe.sections.var_entropy,long,extended,,,Variance for Shannon entropy calculation from the section. 9.0.0-dev+exp,true,process,process.pe.sections.virtual_size,long,extended,,,PE Section List virtual size. This is always the same as `physical_size`. -9.0.0-dev+exp,true,process,process.pgid,long,extended,,,Deprecated identifier of the group of processes the process belongs to. 9.0.0-dev+exp,true,process,process.pid,long,core,,4242,Process id. 9.0.0-dev+exp,true,process,process.previous.args,keyword,extended,array,"[""/usr/bin/ssh"", ""-l"", ""user"", ""10.0.0.16""]",Array of process arguments. 9.0.0-dev+exp,true,process,process.previous.args_count,long,extended,,4,Length of the process.args array. diff --git a/experimental/generated/ecs/ecs_flat.yml b/experimental/generated/ecs/ecs_flat.yml index 1e98a4f605..232ace1ad6 100644 --- a/experimental/generated/ecs/ecs_flat.yml +++ b/experimental/generated/ecs/ecs_flat.yml @@ -11631,20 +11631,6 @@ process.parent.pe.sections.virtual_size: original_fieldset: pe short: PE Section List virtual size. This is always the same as `physical_size`. type: long -process.parent.pgid: - dashed_name: process-parent-pgid - description: 'Deprecated for removal in next major version release. This field is - superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - flat_name: process.parent.pgid - format: string - level: extended - name: pgid - normalize: [] - original_fieldset: process - short: Deprecated identifier of the group of processes the process belongs to. - type: long process.parent.pid: dashed_name: process-parent-pid description: Process id. @@ -12260,19 +12246,6 @@ process.pe.sections.virtual_size: original_fieldset: pe short: PE Section List virtual size. This is always the same as `physical_size`. type: long -process.pgid: - dashed_name: process-pgid - description: 'Deprecated for removal in next major version release. This field is - superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - flat_name: process.pgid - format: string - level: extended - name: pgid - normalize: [] - short: Deprecated identifier of the group of processes the process belongs to. - type: long process.pid: dashed_name: process-pid description: Process id. diff --git a/experimental/generated/ecs/ecs_nested.yml b/experimental/generated/ecs/ecs_nested.yml index df0c77cd0a..a6331615c2 100644 --- a/experimental/generated/ecs/ecs_nested.yml +++ b/experimental/generated/ecs/ecs_nested.yml @@ -13917,20 +13917,6 @@ process: original_fieldset: pe short: PE Section List virtual size. This is always the same as `physical_size`. type: long - process.parent.pgid: - dashed_name: process-parent-pgid - description: 'Deprecated for removal in next major version release. This field - is superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - flat_name: process.parent.pgid - format: string - level: extended - name: pgid - normalize: [] - original_fieldset: process - short: Deprecated identifier of the group of processes the process belongs to. - type: long process.parent.pid: dashed_name: process-parent-pid description: Process id. @@ -14547,19 +14533,6 @@ process: original_fieldset: pe short: PE Section List virtual size. This is always the same as `physical_size`. type: long - process.pgid: - dashed_name: process-pgid - description: 'Deprecated for removal in next major version release. This field - is superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - flat_name: process.pgid - format: string - level: extended - name: pgid - normalize: [] - short: Deprecated identifier of the group of processes the process belongs to. - type: long process.pid: dashed_name: process-pid description: Process id. diff --git a/experimental/generated/elasticsearch/composable/component/process.json b/experimental/generated/elasticsearch/composable/component/process.json index 5a5f6d40ba..0661c41320 100644 --- a/experimental/generated/elasticsearch/composable/component/process.json +++ b/experimental/generated/elasticsearch/composable/component/process.json @@ -1258,9 +1258,6 @@ } } }, - "pgid": { - "type": "long" - }, "pid": { "type": "long" }, @@ -1506,9 +1503,6 @@ } } }, - "pgid": { - "type": "long" - }, "pid": { "type": "long" }, diff --git a/experimental/generated/elasticsearch/legacy/template.json b/experimental/generated/elasticsearch/legacy/template.json index b2ef1132e6..fdf0899b3c 100644 --- a/experimental/generated/elasticsearch/legacy/template.json +++ b/experimental/generated/elasticsearch/legacy/template.json @@ -4020,9 +4020,6 @@ } } }, - "pgid": { - "type": "long" - }, "pid": { "type": "long" }, @@ -4268,9 +4265,6 @@ } } }, - "pgid": { - "type": "long" - }, "pid": { "type": "long" }, diff --git a/generated/beats/fields.ecs.yml b/generated/beats/fields.ecs.yml index 39573cbf0d..9c72e1d110 100644 --- a/generated/beats/fields.ecs.yml +++ b/generated/beats/fields.ecs.yml @@ -6847,15 +6847,6 @@ format: string description: PE Section List virtual size. This is always the same as `physical_size`. default_field: false - - name: parent.pgid - level: extended - type: long - format: string - description: 'Deprecated for removal in next major version release. This field - is superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - default_field: false - name: parent.pid level: core type: long @@ -7219,14 +7210,6 @@ format: string description: PE Section List virtual size. This is always the same as `physical_size`. default_field: false - - name: pgid - level: extended - type: long - format: string - description: 'Deprecated for removal in next major version release. This field - is superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - name: pid level: core type: long diff --git a/generated/csv/fields.csv b/generated/csv/fields.csv index 177908f017..e88f3df281 100644 --- a/generated/csv/fields.csv +++ b/generated/csv/fields.csv @@ -877,7 +877,6 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description 9.0.0-dev,true,process,process.parent.pe.sections.physical_size,long,extended,,,PE Section List physical size. 9.0.0-dev,true,process,process.parent.pe.sections.var_entropy,long,extended,,,Variance for Shannon entropy calculation from the section. 9.0.0-dev,true,process,process.parent.pe.sections.virtual_size,long,extended,,,PE Section List virtual size. This is always the same as `physical_size`. -9.0.0-dev,true,process,process.parent.pgid,long,extended,,,Deprecated identifier of the group of processes the process belongs to. 9.0.0-dev,true,process,process.parent.pid,long,core,,4242,Process id. 9.0.0-dev,true,process,process.parent.real_group.id,keyword,extended,,,Unique identifier for the group on the system/platform. 9.0.0-dev,true,process,process.parent.real_group.name,keyword,extended,,,Name of the group. @@ -931,7 +930,6 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description 9.0.0-dev,true,process,process.pe.sections.physical_size,long,extended,,,PE Section List physical size. 9.0.0-dev,true,process,process.pe.sections.var_entropy,long,extended,,,Variance for Shannon entropy calculation from the section. 9.0.0-dev,true,process,process.pe.sections.virtual_size,long,extended,,,PE Section List virtual size. This is always the same as `physical_size`. -9.0.0-dev,true,process,process.pgid,long,extended,,,Deprecated identifier of the group of processes the process belongs to. 9.0.0-dev,true,process,process.pid,long,core,,4242,Process id. 9.0.0-dev,true,process,process.previous.args,keyword,extended,array,"[""/usr/bin/ssh"", ""-l"", ""user"", ""10.0.0.16""]",Array of process arguments. 9.0.0-dev,true,process,process.previous.args_count,long,extended,,4,Length of the process.args array. diff --git a/generated/ecs/ecs_flat.yml b/generated/ecs/ecs_flat.yml index 1efa3181de..678a7c0a84 100644 --- a/generated/ecs/ecs_flat.yml +++ b/generated/ecs/ecs_flat.yml @@ -11562,20 +11562,6 @@ process.parent.pe.sections.virtual_size: original_fieldset: pe short: PE Section List virtual size. This is always the same as `physical_size`. type: long -process.parent.pgid: - dashed_name: process-parent-pgid - description: 'Deprecated for removal in next major version release. This field is - superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - flat_name: process.parent.pgid - format: string - level: extended - name: pgid - normalize: [] - original_fieldset: process - short: Deprecated identifier of the group of processes the process belongs to. - type: long process.parent.pid: dashed_name: process-parent-pid description: Process id. @@ -12191,19 +12177,6 @@ process.pe.sections.virtual_size: original_fieldset: pe short: PE Section List virtual size. This is always the same as `physical_size`. type: long -process.pgid: - dashed_name: process-pgid - description: 'Deprecated for removal in next major version release. This field is - superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - flat_name: process.pgid - format: string - level: extended - name: pgid - normalize: [] - short: Deprecated identifier of the group of processes the process belongs to. - type: long process.pid: dashed_name: process-pid description: Process id. diff --git a/generated/ecs/ecs_nested.yml b/generated/ecs/ecs_nested.yml index b202b8f4a1..cc958b9e02 100644 --- a/generated/ecs/ecs_nested.yml +++ b/generated/ecs/ecs_nested.yml @@ -13837,20 +13837,6 @@ process: original_fieldset: pe short: PE Section List virtual size. This is always the same as `physical_size`. type: long - process.parent.pgid: - dashed_name: process-parent-pgid - description: 'Deprecated for removal in next major version release. This field - is superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - flat_name: process.parent.pgid - format: string - level: extended - name: pgid - normalize: [] - original_fieldset: process - short: Deprecated identifier of the group of processes the process belongs to. - type: long process.parent.pid: dashed_name: process-parent-pid description: Process id. @@ -14467,19 +14453,6 @@ process: original_fieldset: pe short: PE Section List virtual size. This is always the same as `physical_size`. type: long - process.pgid: - dashed_name: process-pgid - description: 'Deprecated for removal in next major version release. This field - is superseded by `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to.' - flat_name: process.pgid - format: string - level: extended - name: pgid - normalize: [] - short: Deprecated identifier of the group of processes the process belongs to. - type: long process.pid: dashed_name: process-pid description: Process id. diff --git a/generated/elasticsearch/composable/component/process.json b/generated/elasticsearch/composable/component/process.json index db04670fce..10b00ecc8c 100644 --- a/generated/elasticsearch/composable/component/process.json +++ b/generated/elasticsearch/composable/component/process.json @@ -1258,9 +1258,6 @@ } } }, - "pgid": { - "type": "long" - }, "pid": { "type": "long" }, @@ -1506,9 +1503,6 @@ } } }, - "pgid": { - "type": "long" - }, "pid": { "type": "long" }, diff --git a/generated/elasticsearch/legacy/template.json b/generated/elasticsearch/legacy/template.json index 18442c28ee..02f880f6ef 100644 --- a/generated/elasticsearch/legacy/template.json +++ b/generated/elasticsearch/legacy/template.json @@ -3978,9 +3978,6 @@ } } }, - "pgid": { - "type": "long" - }, "pid": { "type": "long" }, @@ -4226,9 +4223,6 @@ } } }, - "pgid": { - "type": "long" - }, "pid": { "type": "long" }, diff --git a/schemas/process.yml b/schemas/process.yml index 289204d597..439704166b 100644 --- a/schemas/process.yml +++ b/schemas/process.yml @@ -138,17 +138,6 @@ - type: match_only_text name: text - - name: pgid - format: string - level: extended - type: long - short: Deprecated identifier of the group of processes the process belongs to. - description: > - Deprecated for removal in next major version release. This field is superseded by - `process.group_leader.pid`. - - Identifier of the group of processes the process belongs to. - - name: command_line level: extended type: wildcard diff --git a/schemas/subsets/main.yml b/schemas/subsets/main.yml index 63b44449fc..beea72fac0 100644 --- a/schemas/subsets/main.yml +++ b/schemas/subsets/main.yml @@ -317,7 +317,6 @@ fields: name: {} pe: fields: "*" - pgid: {} pid: {} vpid: {} start: {} @@ -368,7 +367,6 @@ fields: name: {} pe: fields: "*" - pgid: {} pid: {} vpid: {} previous: