We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Description of the issue:
We are using the following file as a source of ECS mappings for osquery_manager integration: https://github.com/elastic/ecs/blob/main/generated/beats/fields.ecs.yml
It does have as field at the the top level there, which causes our integration validation to fail for 3.0.0 format spec.
as
As far as I understand generated file should not include as field at the top level because it is marked with top_level: false attribute.
ecs/generated/ecs/ecs_nested.yml
Line 157 in 969aeba
Currently it has
and not additional information for us of the field is a top level or not
The text was updated successfully, but these errors were encountered:
Same issue with other fields, here is the list
"as", "code_signature", "elf", "macho", "pe", "risk", "x509",
Sorry, something went wrong.
reusable.top_level
andrewkroh
Successfully merging a pull request may close this issue.
Description of the issue:
We are using the following file as a source of ECS mappings for osquery_manager integration:
https://github.com/elastic/ecs/blob/main/generated/beats/fields.ecs.yml
It does have
as
field at the the top level there, which causes our integration validation to fail for 3.0.0 format spec.As far as I understand generated file should not include
as
field at the top level because it is marked with top_level: false attribute.ecs/generated/ecs/ecs_nested.yml
Line 157 in 969aeba
Currently it has
and not additional information for us of the field is a top level or not
The text was updated successfully, but these errors were encountered: