add time_zone, postal_code, and continent_code (#1229) (#1258)

elastic · Feb 10, 2021 · 90db312 · 90db312
1 parent c8aea73
commit 90db312
Show file tree

Hide file tree

Showing 27 changed files with 1,830 additions and 0 deletions.
diff --git a/CHANGELOG.next.md b/CHANGELOG.next.md
@@ -20,6 +20,7 @@ Thanks, you're awesome :-) -->
 * Added `http.request.id`. #1208
 * Added `cloud.service.name`. #1204
 * Added `hash.ssdeep`. #1169
+* Added `geo.timezone`, `geo.postal_code`, and `geo.continent_code`. #1229
 
 #### Improvements
 

diff --git a/code/go/ecs/geo.go b/code/go/ecs/geo.go
diff --git a/docs/field-details.asciidoc b/docs/field-details.asciidoc
@@ -2788,6 +2788,22 @@ example: `Montreal`
 
 // ===============================================================
 
+|
+[[field-geo-continent-code]]
+<<field-geo-continent-code, geo.continent_code>>
+
+| Two-letter code representing continent's name.
+
+type: keyword
+
+
+
+example: `NA`
+
+| core
+
+// ===============================================================
+
 |
 [[field-geo-continent-name]]
 <<field-geo-continent-name, geo.continent_name>>
@@ -2872,6 +2888,24 @@ example: `boston-dc`
 
 // ===============================================================
 
+|
+[[field-geo-postal-code]]
+<<field-geo-postal-code, geo.postal_code>>
+
+| Postal code associated with the location.
+
+Values appropriate for this field may also be known as a postcode or ZIP code and will vary widely from country to country.
+
+type: keyword
+
+
+
+example: `94040`
+
+| core
+
+// ===============================================================
+
 |
 [[field-geo-region-iso-code]]
 <<field-geo-region-iso-code, geo.region_iso_code>>
@@ -2904,6 +2938,22 @@ example: `Quebec`
 
 // ===============================================================
 
+|
+[[field-geo-timezone]]
+<<field-geo-timezone, geo.timezone>>
+
+| The time zone of the location, such as IANA time zone name.
+
+type: keyword
+
+
+
+example: `America/Argentina/Buenos_Aires`
+
+| core
+
+// ===============================================================
+
 |=====
 
 [discrete]