From 32ce0779231b9d77ee3bfa67efc7ca579fea44da Mon Sep 17 00:00:00 2001 From: Mathieu Martin Date: Fri, 9 Nov 2018 12:41:04 -0500 Subject: [PATCH] Temporarily add `http` fields, until they're back in ECS. --- libbeat/_meta/fields.common.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/libbeat/_meta/fields.common.yml b/libbeat/_meta/fields.common.yml index d76631349a3..55fe3ee520a 100644 --- a/libbeat/_meta/fields.common.yml +++ b/libbeat/_meta/fields.common.yml @@ -37,3 +37,32 @@ type: keyword description: > Error type. + +# HTTP field definitions below are temporary, until http makes its way into ECS again. +# See https://github.com/elastic/ecs/pull/171 +- key: http + title: HTTP + fields: + - name: http.request.method + type: keyword + description: > + http request method. + example: get, post, put + + - name: http.response.status_code + type: long + description: > + http response status code. + example: 404 + + - name: http.response.body + type: text + description: > + the full http response body. + example: hello world + + - name: http.version + type: keyword + description: > + http version. + example: 1.1