Skip to content

Commit

Permalink
Update MySQL protocol to use ECS fields
Browse files Browse the repository at this point in the history
That dashboard was updated too.

Here's a summary of what fields changed.

Part of #7968

Changed

- bytes_in -> source.bytes
- bytes_out -> destination.bytes
- notes -> error.message
- responsetime -> event.duration (unit are now nanoseconds)

Added

- destination
- event.dataset = mysql
- event.end
- event.start
- network.bytes
- network.community_id
- network.protocol = mysql
- network.transport = tcp
- network.type
- source

Removed

- mysql.iserror - It was a boolean that reflected the same information as `status` which uses OK or Error.

Unchanged Packetbeat Fields

- method
- query
- params
- path
- status
- type = mysql (we might remove this since we have event.dataset)
  • Loading branch information
andrewkroh committed Jan 18, 2019
1 parent 31fec4f commit 50acf0e
Show file tree
Hide file tree
Showing 11 changed files with 1,251 additions and 845 deletions.
1 change: 1 addition & 0 deletions CHANGELOG.next.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
- Changed DHCPv4 protocol fields to align with ECS. {pull}10089[10089]
- Changed AMQP protocol fields to align with ECS. {pull}10090[10090]
- Changed HTTP protocol fields to align with ECS. {pull}9976[9976]
- Changed MySQL protocol fields to align with ECS. {pull}10155[10155]

*Winlogbeat*

Expand Down
8 changes: 8 additions & 0 deletions dev-tools/ecs-migration.yml
Original file line number Diff line number Diff line change
Expand Up @@ -914,6 +914,14 @@
to: network.forwarded_ip
alias: false

## MySQL
- from: mysql.iserror
to: status
alias: false
comment: >
Status reflects whether or not an error occured. Its values are either
OK or Error.
# Heartbeat

Expand Down
Loading

0 comments on commit 50acf0e

Please sign in to comment.