Upstream ECS merge of v1.9.0 #2

dseeley · 2021-05-05T09:31:00Z

Cut 1.9 changelog (Cut 1.9 changelog elastic/ecs#1328)
Remove -dev label from 1.9 version (Remove -dev label from 1.9 version elastic/ecs#1329)
Adjust terminology - change whitelist to allowlist (Adjust terminology - change whitelist to allowlist elastic/ecs#1315) ([1.9] Adjust terminology - change whitelist to allowlist (#1315) elastic/ecs#1331)
Bump pyyaml from 5.3b1 to 5.4 in /scripts (Bump pyyaml from 5.3b1 to 5.4 in /scripts elastic/ecs#1318) ([1.9] Bump pyyaml from 5.3b1 to 5.4 in /scripts (#1318) elastic/ecs#1325)
Bump jinja2 from 2.11.2 to 2.11.3 in /scripts (Bump jinja2 from 2.11.2 to 2.11.3 in /scripts elastic/ecs#1310) ([1.9] Bump jinja2 from 2.11.2 to 2.11.3 in /scripts (#1310) elastic/ecs#1320)
lock go version in actions (Set go version to 1.15.x in tests elastic/ecs#1283) ([1.9] lock go version in actions (#1283) elastic/ecs#1290)
Cut 1.9 FF CHANGELOG.next.md (Cut 1.9 FF CHANGELOG.next.md elastic/ecs#1277)
Stage 1 changes for RFC 0015 - add elf fieldset (Stage 1 changes for RFC 0015 - add elf fieldset elastic/ecs#1261) ([1.x] Stage 1 changes for RFC 0015 - add elf fieldset (#1261) elastic/ecs#1275)
Stage 1 experimental changes for RFC 0008 - threat.indicator fields (Stage 1 experimental changes for RFC 0008 - threat.indicator fields elastic/ecs#1268) ([1.x] Stage 1 experimental changes for RFC 0008 - threat.indicator fields (#1268) elastic/ecs#1274)
Stage 3 changes for RFC 0007 - remove beta attribute (Stage 3 changes for RFC 0007 - remove beta attribute elastic/ecs#1271) ([1.x] Stage 3 changes for RFC 0007 - remove beta attribute (#1271) elastic/ecs#1273)
Add 2 fields to code_signature (Add 2 fields to code_signature elastic/ecs#1269) ([1.x] Add 2 fields to code_signature (#1269) elastic/ecs#1272)
Stage 1 changes for RFC 0014 - extend pe fields (Stage 1 changes for RFC 0014 - extend pe fields elastic/ecs#1256) ([1.x] Stage 1 changes for RFC 0014 - extend pe fields (#1256) elastic/ecs#1270)
Add additional host fields (Add additional host fields elastic/ecs#1248) ([1.x] Add additional host fields (#1248) elastic/ecs#1267)
finalize 1.8.0 changelog (Cut 1.8 changelog elastic/ecs#1262) ([1.x] Cut 1.8 changelog #1262 elastic/ecs#1265)
Specify MAC address format (Specify MAC address format like this example 00-00-5E-00-53-23 elastic/ecs#456) ([1.x] Specify MAC address format (#456) elastic/ecs#1260)
add time_zone, postal_code, and continent_code (add time_zone, postal_code, and continent_code elastic/ecs#1229) ([1.x] add time_zone, postal_code, and continent_code (#1229) elastic/ecs#1258)
Add categorization fields usage docs (Add categorization fields usage docs elastic/ecs#1242) ([1.x] Add categorization fields usage docs (#1242) elastic/ecs#1257)
Add scaled_float type to go generator (Add scaled_float type to go generator elastic/ecs#1250) ([1.x] Add scaled_float type to go generator (#1250) elastic/ecs#1251)
Revert wildcard adoption back to experimental stage (Revert wildcard adoption back to experimental stage elastic/ecs#1235) ([1.x] Revert wildcard adoption back to experimental stage (#1235) elastic/ecs#1243)
[CI] Switch to GitHub actions ([CI] Switch to GitHub actions elastic/ecs#1236) ([1.x] [CI] Switch to GitHub actions (#1236) elastic/ecs#1245)
[1.x] Add ssdeep hash (Add ssdeep hash elastic/ecs#1169) ([1.x] Add ssdeep hash (#1169) elastic/ecs#1227)
[1.x] add cloud.service.name (add cloud.service.name elastic/ecs#1204) ([1.x] add cloud.service.name (#1204) elastic/ecs#1224)
[1.x] add http.request.id (add http.request.id elastic/ecs#1208) ([1.x] add http.request.id (#1208) elastic/ecs#1223)
[1.x] Stage 2 changes for RFC 0009 - data_stream fields (Stage 2 changes for RFC 0009 - data_stream fields elastic/ecs#1215) ([1.x] Stage 2 changes for RFC 0009 - data_stream fields (#1215) elastic/ecs#1222)
Merge custom and core multi_fields arrays (Merge custom and core multi_fields array elastic/ecs#982) ([1.x] Merge custom and core multi_fields arrays (#982) elastic/ecs#1213)
[1.x] Cut 1.8 FF changelog.next.md Cut 1.8 FF changelog.next.md elastic/ecs#1199 ([1.x] Cut 1.8 FF changelog.next.md #1199 elastic/ecs#1201)
Bump version to 1.9.0-dev in branch 1.x (Bump version to 1.9.0-dev in branch 1.x elastic/ecs#1198)
[1.x] Correct wording of event.reference description (Correct wording of event.reference description elastic/ecs#1181) ([1.x] Correct wording of event.reference description (#1181) elastic/ecs#1197)
[1.x] Remove beta warning label from categorization fields docs (Remove beta warning label from categorization fields docs elastic/ecs#1067) ([1.x] Remove beta warning label from categorization fields docs (#1067) elastic/ecs#1196)
[1.x] Artifacts docs page (Artifacts docs page elastic/ecs#1189) ([1.x] Artifacts docs page (#1189) elastic/ecs#1195)
[1.x] Conditional handling in es_template.template_settings (Conditional handling in es_template.template_settings elastic/ecs#1191) ([1.x] Conditional handling in es_template.template_settings (#1191) elastic/ecs#1192)
[1.x] Stage 3 changes for wildcard RFC 0001 (Stage 3 changes for wildcard RFC 0001 elastic/ecs#1098) ([1.x] Stage 3 changes for wildcard RFC 0001 (#1098) elastic/ecs#1183)
[1.x] Apply the RFC 0005 stage 2 (host metrics) changes in the experimental artifacts (Stage 2 changes for RFC 0005 (host metrics) elastic/ecs#1159) ([1.x] Apply the RFC 0005 stage 2 (host metrics) changes in the experimental artifacts (#1159) elastic/ecs#1184)
[1.x] Move _meta section back inside mappings, in legacy templates. (Move _meta section back inside mappings, in legacy templates. elastic/ecs#1186) ([1.x] Move _meta section back inside mappings, in legacy templates. (#1186) elastic/ecs#1187)
[1.x] Add composable index templates artifacts (Add composable index templates artifacts elastic/ecs#1156) ([1.x] Add composable index templates artifacts (#1156) elastic/ecs#1179)
[1.x] Handle error.stack_trace case for ES 6.x template (Handle error.stack_trace case for ES 6.x template elastic/ecs#1176) ([1.x] Handle error.stack_trace case for ES 6.x template (#1176) elastic/ecs#1177)
[1.x] Apply RFC 0007 stage 3 changes - multi-user (Changes related to merging RFC 0007 at stage 3 elastic/ecs#1066) ([1.x] Apply RFC 0007 stage 3 changes - multi-user (#1066) elastic/ecs#1175)
[1.x] 6.x index template data type fallback (6.x index template data type fallback elastic/ecs#1171) ([1.x] 6.x index template data type fallback (#1171) elastic/ecs#1172)
[1.x] Usage of brackets for a URL containing IPv6 address (Usage of brackets for a URL containing IPv6 address elastic/ecs#1131) ([1.x] Usage of brackets for a URL containing IPv6 address (#1131) elastic/ecs#1168)
[1.x] Tracing fields should be at the root ([1.x] Tracing fields should be at the root elastic/ecs#1165)
[1.x] Make all fields linkable directly via an HTML ID (Make all fields linkable directly via an HTML ID elastic/ecs#1148) ([1.x] Make all fields linkable directly via an HTML ID (#1148) elastic/ecs#1154)
[1.x] Reinforce the exclusion of the leading dot from url.extension (Reinforce the exclusion of the leading dot from url.extension elastic/ecs#1151) ([1.x] Reinforce the exclusion of the leading dot from url.extension (#1151) elastic/ecs#1152)
Two small documentation backports (Two small documentation backports elastic/ecs#1149)
[1.x] Backport Docs: Remove ifeval from getting-starting elastic/ecs#1134 and Docs: Remove ifeval from products page elastic/ecs#1135 ([1.x] Backport #1134 and #1135 elastic/ecs#1136)
[1.x] Beta label support (Beta label support elastic/ecs#1051) ([1.x] Beta label support (#1051) elastic/ecs#1133)
[1.x] Add support for constant_keyword's 'value' parameter (Add support for constant_keyword's 'value' parameter elastic/ecs#1112) ([1.x] Add support for constant_keyword's 'value' parameter (#1112) elastic/ecs#1132)
[1.x] Add os.type field, with list of allowed values (Add os.type field elastic/ecs#1111) ([1.x] Add os.type field, with list of allowed values (#1111) elastic/ecs#1130)
[1.x] Indicate when artifacts include experimental changes (Indicate when artifacts include experimental changes elastic/ecs#1117) ([1.x] Indicate when artifacts include experimental changes (#1117) elastic/ecs#1125)
[1.x] Clarify x509 definition guidance for network events with only one cert (Clarify x509 definition guidance for network events with only one cert elastic/ecs#1114) ([1.x] Clarify x509 definition guidance for network events with only one cert (#1114) elastic/ecs#1123)
[1.x] Add dns.answer object into experimental schema (Add dns.answer object into experimental schema elastic/ecs#1118) ([1.x] Add dns.answer object into experimental schema (#1118) elastic/ecs#1121)
[1.x] Remove index parameter for wildcard fields (Remove index parameter for wildcard fields elastic/ecs#1115) ([1.x] Remove index parameter for wildcard fields (#1115) elastic/ecs#1119)
[1.x] Add missing process.thread.name to experimental definitions (Add missing process.thread.name to experimental definitions elastic/ecs#1103) ([1.x] Add missing process.thread.name to experimental definitions (#1103) elastic/ecs#1106)
[1.x] Remove experimental event.original definition (Remove experimental event.original definition elastic/ecs#1053) ([1.x] Remove experimental event.original definition (#1053) elastic/ecs#1104)
[1.x] Add --ref support for experimental artifacts (Add --ref support for experimental artifacts elastic/ecs#1063) ([1.x] Add --ref support for experimental artifacts (#1063) elastic/ecs#1101)
[1.x] Add event.category registry (Add event.category registry elastic/ecs#1040) ([1.x] Add event.category registry (#1040) elastic/ecs#1094)
[1.x] Add event.category session. (Add event.category session. elastic/ecs#1049) ([1.x] Add event.category session. (#1049) elastic/ecs#1093)
[1.x] Prepare link to Logs docs changing with the 7.10 release in "products-solutions" page (Docs: Add ifeval to products page elastic/ecs#1074) ([1.x] Prepare link to Logs docs changing with the 7.10 release in "products-solutions" page (#1074) elastic/ecs#1083)
[1.x] Prepare link to Logs docs changing with the 7.10 release in "getting-started" (Docs: Add ifeval for 7.10 release elastic/ecs#1073) ([1.x] Prepare link to Logs docs changing with the 7.10 release in "getting-started" (#1073) elastic/ecs#1079)
[1.x] Change the index pattern in the sample template. (Change the index pattern in the sample template. elastic/ecs#1048) ([1.x] Change the index pattern in the sample template. elastic/ecs#1068)
[1.x] New default make task that generates main and experimental artifacts. (New default make task that generates main and experimental artifacts. elastic/ecs#1041) ([1.x] New default make task that generates main and experimental artifacts. (#1041) elastic/ecs#1060)
[1.x] Add wildcard type support to go code generator (Add wildcard type support to go code generator elastic/ecs#1050) ([1.x] Add wildcard type support to go code generator (#1050) elastic/ecs#1057)
[1.x] Add fallback for constant_keyword (Add fallback for constant_keyword elastic/ecs#1046) ([1.x] Add fallback for constant_keyword (#1046) elastic/ecs#1056)
[1.x] Add support for scaling_factor in the generator (Add support for scaling_factor in the generator elastic/ecs#1042) ([1.x] Add support for scaling_factor in the generator (#1042) elastic/ecs#1055)
[1.x] feat: include alias path when generating template (feat: include alias path when generating template elastic/ecs#877) ([1.x] feat: include alias path when generating template (#877) elastic/ecs#1035)
[1.x] Add usage docs section (Add usage docs section elastic/ecs#988) ([1.x] Add usage docs section (#988) elastic/ecs#1024)
[1.x] Clarify that file extension should exclude the dot. (Clarify that file extension should exclude the dot. elastic/ecs#1016) ([1.x] Clarify that file extension should exclude the dot. (#1016) elastic/ecs#1020)
Cut 1.7 changelog (Cut 1.7 changelog elastic/ecs#1010) ([1.x] Cut 1.7 changelog (#1010) elastic/ecs#1012)
Bump version to 1.8.0-dev in branch 1.x (Bump version to 1.8.0-dev in branch 1.x elastic/ecs#1011)
[1.x] Introduce experimental artifacts (Introduce experimental artifacts elastic/ecs#993) ([1.x] Introduce experimental artifacts (#993) elastic/ecs#1001)
Mention ECS Mapper in the main documentation (Mention ECS Mapper in the main documentation elastic/ecs#987) ([1.x] Mention ECS Mapper in the main documentation (#987) elastic/ecs#1000)
Add network directions ingress and egress (Add network directions ingress and egress elastic/ecs#945) ([1.x] Add network directions ingress and egress (#945) elastic/ecs#997)
Add --oss flag to the ECS generator script (Add --oss flag to the ECS generator script elastic/ecs#991) ([1.x] Add --oss flag to the ECS generator script (#991) elastic/ecs#995)
[1.x] Uniformity across domain name breakdown fields (Uniformity across domain name breakdown fields elastic/ecs#981) ([1.x] Uniformity across domain name breakdown fields (#981) elastic/ecs#994)
[1.x] Add discrete attribute to field details page headers (Add discrete attribute to field details page headers elastic/ecs#989) ([1.x] Add discrete attribute to field details page headers (#989) elastic/ecs#990)
[1.x] Removing unneeded link under Additional Information (Removing unneeded link under Additional Information elastic/ecs#984) ([1.x] Removing unneeded link under Additional Information (#984) elastic/ecs#985)
[1.x] Add mapping network event guidance doc (Add mapping network event guidance doc elastic/ecs#969) ([1.x] Add mapping network event guidance doc (#969) elastic/ecs#983)
[1.x] Add normalizer multi-field capability (Add normalizer multi-field capability elastic/ecs#971) ([1.x] Add normalizer multi-field capability (#971) elastic/ecs#978)
[1.x] Add event category configuration (Add event category configuration elastic/ecs#963) ([1.x] Add event category configuration (#963) elastic/ecs#977)
[1.x] Add example value composite type checking (Add example value composite type checking elastic/ecs#966) ([1.x] Add example value composite type checking (#966) elastic/ecs#976)
[1.x] Introduce --strict flag (Introduce --strict flag elastic/ecs#937) ([1.x] Introduce --strict flag (#937) elastic/ecs#975)
[1.x] Expand definitions of source and destination field sets (Expand definitions of source and destination field sets elastic/ecs#967) ([1.x] Expand definitions of source and destination field sets (#967) elastic/ecs#973)
[1.x] Remove expected_event_types from protocol (Remove expected_event_types from protocol elastic/ecs#964) ([1.x] Remove expected_event_types from protocol (#964) elastic/ecs#965)
[1.x] Nest as for foreign reuse (Nest as for foreign reuse elastic/ecs#960) ([1.x] Nest as for foreign reuse (#960) elastic/ecs#962)
[1.x] Add threat.technique.subtechnique (Add threat.technique.subtechnique elastic/ecs#951) ([1.x] Add threat.technique.subtechnique (#951) elastic/ecs#956)
[1.x] Cut 1.6 Changelog (Move changelog entries to more appropriate subsections elastic/ecs#933) ([master] Move changelog entries to more appropriate subsections (#933) elastic/ecs#952) ([1.x] Cut 1.6 Changelog (#933) (#952) elastic/ecs#953)
Add http.[request|response].mime_type (Add http.[request|response].mime_type elastic/ecs#944) ([1.x] Add http.[request|response].mime_type (#944) elastic/ecs#949)
[1.x] Consolidate field-details doc template (Consolidate field-details doc template elastic/ecs#897) ([1.x] Consolidate field-details doc template (#897) elastic/ecs#946)
[1.x][DOCS] Fixes SIEM links ([1.x][DOCS] Fixes SIEM links elastic/ecs#936)
[1.x] add related.hosts (add related.hosts elastic/ecs#913) ([1.x] add related.hosts (#913) elastic/ecs#924)
bumping version for 1.x release branch (bumping version for 1.x release branch elastic/ecs#921)

Co-authored-by: Mathieu Martin <mathieu.martin@elastic.co>

Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>

…tic#965)

…c#967) (elastic#973)

…c#976) * Add example value composite type checking (elastic#966) * generate csv artifact

Co-authored-by: Eric Beahan <ebeahan@gmail.com> Co-authored-by: Madison Caldwell <madison.rey.caldwell@gmail.com>

) (elastic#985)

…) (elastic#990)

…lastic#994) Co-authored-by: Mathieu Martin <webmat@gmail.com>

) Co-authored-by: Dan Roscigno <dan@roscigno.com>

Co-authored-by: Mathieu Martin <webmat@gmail.com>

…) (elastic#1020)

Co-authored-by: Mathieu Martin <mathieu.martin@elastic.co>

…elastic#1035) Co-authored-by: Richard Gomez <32133502+rgmz@users.noreply.github.com>

elastic#1055) Co-authored-by: Mathieu Martin <mathieu.martin@elastic.co>

Co-authored-by: Mathieu Martin <mathieu.martin@elastic.co>

…lastic#1057) * add wildcard type support * also add version and constant_keyword * changelog

Co-authored-by: Jonathan Buttner <56361221+jonathan-buttner@users.noreply.github.com>

elastic#1222)

Co-authored-by: Eric Beahan <eric.beahan@elastic.co> Co-authored-by: Gil Raphaelli <gil@elastic.co>

* add cloud.platform * expand cloud.platform description * move to cloud.service.name Co-authored-by: Gil Raphaelli <gil@elastic.co>

Co-authored-by: Andrew Stucki <andrew.stucki@elastic.co>

Co-authored-by: Eric Beahan <ebeahan@gmail.com> Co-authored-by: Andrew Stucki <andrew.stucki@elastic.co>

…lastic#1243)

* add scaled_float * changelog

…c#1258)

Co-authored-by: Robin Schneider <36660054+ypid-geberit@users.noreply.github.com>

Co-authored-by: kaiyan-sheng <kaiyan.sheng@elastic.co>

…ic#1270)

Co-authored-by: Yamin Tian <56367679+Trinity2019@users.noreply.github.com>

…lastic#1273)

…lastic#1268) (elastic#1274)

…ic#1275)

…#1320) * Bump jinja2 from 2.11.2 to 2.11.3 in /scripts

Co-authored-by: Eric Beahan <eric.beahan@elastic.co> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…astic#1331) Co-authored-by: Dominic Page <11043991+djptek@users.noreply.github.com>

* remove -dev label from 1.9 version * generate artifacts * removing rules artifacts

* move 1.9 changes to changelog * add 1.9 release changes add entry

ebeahan and others added 30 commits August 13, 2020 09:18

bumping version for 1.x release branch (elastic#921)

16514a1

[1.x] add related.hosts (elastic#913) (elastic#924)

5d134c9

[1.x][DOCS] Fixes SIEM links (elastic#936)

64ea560

[1.x] Consolidate field-details doc template (elastic#897) (elastic#946)

ab227b3

Add http.[request|response].mime_type (elastic#944) (elastic#949)

e106899

[1.x] Cut 1.6 Changelog (elastic#933) (elastic#952) (elastic#953)

4b6742b

Co-authored-by: Mathieu Martin <mathieu.martin@elastic.co>

[1.x] Add threat.technique.subtechnique (elastic#951) (elastic#956)

357ce24

Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>

[1.x] Nest as for foreign reuse (elastic#960) (elastic#962)

9c4fc4c

[1.x] Remove expected_event_types from protocol (elastic#964) (elas…

3eb6d99

…tic#965)

[1.x] Expand definitions of source and destination field sets (elasti…

d5820b9

…c#967) (elastic#973)

[1.x] Introduce --strict flag (elastic#937) (elastic#975)

e6ba4c4

[1.x] Add example value composite type checking (elastic#966) (elasti…

214a01c

…c#976) * Add example value composite type checking (elastic#966) * generate csv artifact

[1.x] Add event category configuration (elastic#963) (elastic#977)

7633cb0

[1.x] Add normalizer multi-field capability (elastic#971) (elastic#978)

5b353fe

Co-authored-by: Eric Beahan <ebeahan@gmail.com> Co-authored-by: Madison Caldwell <madison.rey.caldwell@gmail.com>

[1.x] Add mapping network event guidance doc (elastic#969) (elastic#983)

c5ccecc

[1.x] Removing unneeded link under Additional Information (elastic#984

7897203

) (elastic#985)

[1.x] Add discrete attribute to field details page headers (elastic#989…

23abff6

…) (elastic#990)

[1.x] Uniformity across domain name breakdown fields (elastic#981) (e…

e086abb

…lastic#994) Co-authored-by: Mathieu Martin <webmat@gmail.com>

Add --oss flag to the ECS generator script (elastic#991) (elastic#995)

b9b1ba5

Add network directions ingress and egress (elastic#945) (elastic#997)

d847184

Mention ECS Mapper in the main documentation (elastic#987) (elastic#1000

4a49618

) Co-authored-by: Dan Roscigno <dan@roscigno.com>

[1.x] Introduce experimental artifacts (elastic#993) (elastic#1001)

20ae5e0

Co-authored-by: Mathieu Martin <webmat@gmail.com>

Bump version to 1.8.0-dev in branch 1.x (elastic#1011)

947f410

Cut 1.7 changelog (elastic#1010) (elastic#1012)

1dc6240

[1.x] Clarify that file extension should exclude the dot. (elastic#1016…

501d404

…) (elastic#1020)

[1.x] Add usage docs section (elastic#988) (elastic#1024)

14141ec

Co-authored-by: Mathieu Martin <mathieu.martin@elastic.co>

[1.x] feat: include alias path when generating template (elastic#877) (…

35764fa

…elastic#1035) Co-authored-by: Richard Gomez <32133502+rgmz@users.noreply.github.com>

[1.x] Add support for scaling_factor in the generator (elastic#1042) (

a173cda

elastic#1055) Co-authored-by: Mathieu Martin <mathieu.martin@elastic.co>

[1.x] Add fallback for constant_keyword (elastic#1046) (elastic#1056)

5afd0a5

Co-authored-by: Mathieu Martin <mathieu.martin@elastic.co>

[1.x] Add wildcard type support to go code generator (elastic#1050) (e…

7ef838b

…lastic#1057) * add wildcard type support * also add version and constant_keyword * changelog

ebeahan and others added 28 commits December 15, 2020 15:34

Bump version to 1.9.0-dev in branch 1.x (elastic#1198)

cd6778c

[1.x] Cut 1.8 FF changelog.next.md elastic#1199 (elastic#1201)

ddf2568

Merge custom and core multi_fields arrays (elastic#982) (elastic#1213)

d1e08be

Co-authored-by: Jonathan Buttner <56361221+jonathan-buttner@users.noreply.github.com>

[1.x] Stage 2 changes for RFC 0009 - data_stream fields (elastic#1215) (

4ab85fa

elastic#1222)

[1.x] add http.request.id (elastic#1208) (elastic#1223)

2b240f1

Co-authored-by: Eric Beahan <eric.beahan@elastic.co> Co-authored-by: Gil Raphaelli <gil@elastic.co>

[1.x] add cloud.service.name (elastic#1204) (elastic#1224)

36ebb01

* add cloud.platform * expand cloud.platform description * move to cloud.service.name Co-authored-by: Gil Raphaelli <gil@elastic.co>

[1.x] Add ssdeep hash (elastic#1169) (elastic#1227)

a487613

Co-authored-by: Andrew Stucki <andrew.stucki@elastic.co>

[CI] Switch to GitHub actions (elastic#1236) (elastic#1245)

bc1f9af

Co-authored-by: Eric Beahan <ebeahan@gmail.com> Co-authored-by: Andrew Stucki <andrew.stucki@elastic.co>

Revert wildcard adoption back to experimental stage (elastic#1235) (e…

30e4a10

…lastic#1243)

Add scaled_float type to go generator (elastic#1250) (elastic#1251)

324c0bc

* add scaled_float * changelog

Add categorization fields usage docs (elastic#1242) (elastic#1257)

c8aea73

add time_zone, postal_code, and continent_code (elastic#1229) (elasti…

90db312

…c#1258)

Specify MAC address format (elastic#456) (elastic#1260)

9006c8d

Co-authored-by: Robin Schneider <36660054+ypid-geberit@users.noreply.github.com>

finalize 1.8.0 changelog (elastic#1262) (elastic#1265)

86bc271

Add additional host fields (elastic#1248) (elastic#1267)

b1aca41

Co-authored-by: kaiyan-sheng <kaiyan.sheng@elastic.co>

Stage 1 changes for RFC 0014 - extend pe fields (elastic#1256) (elast…

9f97ffb

…ic#1270)

Add 2 fields to code_signature (elastic#1269) (elastic#1272)

16a60ec

Co-authored-by: Yamin Tian <56367679+Trinity2019@users.noreply.github.com>

Stage 3 changes for RFC 0007 - remove beta attribute (elastic#1271) (e…

cc9ad49

…lastic#1273)

Stage 1 experimental changes for RFC 0008 - threat.indicator fields (e…

40ee8d0

…lastic#1268) (elastic#1274)

Stage 1 changes for RFC 0015 - add elf fieldset (elastic#1261) (elast…

bdf980c

…ic#1275)

Cut 1.9 FF CHANGELOG.next.md (elastic#1277)

31bbdd6

lock go version in actions (elastic#1283) (elastic#1290)

5df9b6b

Bump jinja2 from 2.11.2 to 2.11.3 in /scripts (elastic#1310) (elastic…

d8bcd18

…#1320) * Bump jinja2 from 2.11.2 to 2.11.3 in /scripts

Bump pyyaml from 5.3b1 to 5.4 in /scripts (elastic#1318) (elastic#1325)

9a677e1

Co-authored-by: Eric Beahan <eric.beahan@elastic.co> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Adjust terminology - change whitelist to allowlist (elastic#1315) (el…

56f6e31

…astic#1331) Co-authored-by: Dominic Page <11043991+djptek@users.noreply.github.com>

Remove -dev label from 1.9 version (elastic#1329)

5bbed42

* remove -dev label from 1.9 version * generate artifacts * removing rules artifacts

Cut 1.9 changelog (elastic#1328)

6ed7e13

* move 1.9 changes to changelog * add 1.9 release changes add entry

Merge remote-tracking branch 'upstream/1.9' into ecs_merge__v1.9.0

4237eeb

dseeley closed this May 5, 2021

dseeley deleted the ecs_merge__v1.9.0 branch May 5, 2021 11:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Upstream ECS merge of v1.9.0 #2

Upstream ECS merge of v1.9.0 #2

dseeley commented May 5, 2021

Upstream ECS merge of v1.9.0 #2

Upstream ECS merge of v1.9.0 #2

Conversation

dseeley commented May 5, 2021