Code

Migrate Winlogbeat to ECS, take 2#10333

Code

Merged

webmat merged 27 commits intoelastic:masterelastic/beats:masterfrom webmat:winlogbeat-ecswebmat/beats:winlogbeat-ecsCopy head branch name to clipboardFeb 5, 2019

+936-720

Commits

Commits on Feb 5, 2019

• Migrate Winlogbeat to ECS

  Show description for b45d1c1
  

  ruflin

  authored and

  Mathieu Martin

  committed
  b45d1c1

• Incorporate some of the PR feedback so far, introduce one new suggestion

  

  Mathieu Martin

  committed
  4337c0a

• A few more suggested tweaks

  

  Mathieu Martin

  committed
  eaa3b85

• A lost Rubyist tries dig into event_data

  

  Mathieu Martin

  committed
  85b422b

• Radical update:

  Show description for 48ca9f8
  

  Mathieu Martin

  committed
  48ca9f8

• Update my comment for a few other things we can grab

  

  Mathieu Martin

  committed
  1a0444f

• This should be roughly the final shape of the event. Next: aliases.

  

  Mathieu Martin

  committed
  0f322b6

• go fmt yourself

  

  Mathieu Martin

  committed
  cc7e4d5

• Small field name adjustments, improving consistency

  

  Mathieu Martin

  committed
  2b1fd37

• Add all the aliases we can

  

  Mathieu Martin

  committed
  97db465

• Reorder field defs for easier diffing

  

  Mathieu Martin

  committed
  8f79d97

• Move nest message_error, not actually sure it maps to ECS

  

  Mathieu Martin

  committed
  2103a8a

• Adjust the tests to the new field names

  Show description for a675128
  

  Mathieu Martin

  committed
  a675128

• Minor improvements

  

  Mathieu Martin

  committed
  77dc2d4

• Remove debugging statement, remove host.hostname and dataset from events

  

  Mathieu Martin

  committed
  3351e81

• Make sur all fields defined in same order, for diffing purposes

  

  Mathieu Martin

  committed
  8bbebdd

• Remove field defs used for debugging

  

  Mathieu Martin

  committed
  1e37c2e

• Changelog

  

  Mathieu Martin

  committed
  8d311f1

• Improve how event.code and event.original are defined in fields.yml

  

  Mathieu Martin

  committed
  b917cbb

• Document all field migrations in ecs-migration.yml

  

  Mathieu Martin

  committed
  7ca07a8

• Modify documentation to match field names now emitted by Winlogbeat

  

  Mathieu Martin

  committed
  bf2a668

• Space. The final frontier.

  

  Mathieu Martin

  committed
  8125638

• Set overwrite:true on the re-definition of event.original.

  

  Mathieu Martin

  committed
  798b0f8

• Migrate message_error to error.message. Populate error.code (new)

  

  Mathieu Martin

  committed
  0e5b0b9

• Update dashboard to the new field names

  

  Mathieu Martin

  committed
  58c08c5

• Adjust text labels on dashboard to better match the new field names

  

  Mathieu Martin

  committed
  0c397a6

• Fix entry in ecs-mig.yml

  

  Mathieu Martin

  committed
  7d26f79