elastic/ecs issues and pull requests

#2309 - Support cloud events in schema

Issue - State: closed - Opened by thompson-tomo 11 months ago - 1 comment
Labels: enhancement

#2308 - Addition of additional allowed values for event.type

Issue - State: open - Opened by thompson-tomo 11 months ago
Labels: enhancement

#2308 - Addition of additional allowed values for event.type

Issue - State: open - Opened by thompson-tomo 11 months ago
Labels: enhancement

#2307 - [RFC] added new field: threat.indicator.id - resolves GH-2252

Pull Request - State: closed - Opened by brett-fitz 11 months ago - 6 comments

#2307 - [RFC] added new field: threat.indicator.id - resolves GH-2252

Pull Request - State: closed - Opened by brett-fitz 11 months ago - 6 comments

#2306 - Add event.zone and event.environment fields

Issue - State: open - Opened by mbudge 11 months ago - 3 comments
Labels: enhancement

#2306 - Add event.zone and event.environment fields

Issue - State: open - Opened by mbudge 11 months ago - 3 comments
Labels: enhancement

#2305 - Add `related.url` field

Issue - State: open - Opened by chrisberkhout 11 months ago
Labels: enhancement, discuss, New Field Request

#2305 - Add `related.url` field

Issue - State: open - Opened by chrisberkhout 11 months ago
Labels: enhancement, discuss, New Field Request

#2304 - [main] Adding changelog for volume field set addition

Pull Request - State: closed - Opened by kgeller 11 months ago

#2304 - [main] Adding changelog for volume field set addition

Pull Request - State: closed - Opened by kgeller 11 months ago

#2303 - [8.11] Removing entry for volume field set addition

Pull Request - State: closed - Opened by kgeller 11 months ago

#2303 - [8.11] Removing entry for volume field set addition

Pull Request - State: closed - Opened by kgeller 11 months ago

#2302 - Elastic-Agent Integrations Use of Legacy Mapping Types Impacts .fleet_globals & prevents agents from being upgraded

Issue - State: open - Opened by iamhowardtheduck 12 months ago
Labels: bug

#2302 - Elastic-Agent Integrations Use of Legacy Mapping Types Impacts .fleet_globals & prevents agents from being upgraded

Issue - State: open - Opened by iamhowardtheduck 12 months ago
Labels: bug

#2298 - Release notes for 8.11

Pull Request - State: closed - Opened by taylor-swanson 12 months ago - 1 comment
Labels: forward_port

#2298 - Release notes for 8.11

Pull Request - State: closed - Opened by taylor-swanson 12 months ago - 1 comment
Labels: forward_port

#2291 - Add hint to RFC 5424 in `log.syslog.severity.name` and `log.syslog.severity.code`

Pull Request - State: open - Opened by fgierlinger about 1 year ago - 5 comments
Labels: stale

#2291 - Add hint to RFC 5424 in `log.syslog.severity.name` and `log.syslog.severity.code`

Pull Request - State: open - Opened by fgierlinger about 1 year ago - 5 comments
Labels: stale

#2290 - Fix description of syslog.severity.name and syslog.severity.code

Pull Request - State: open - Opened by fgierlinger about 1 year ago - 3 comments
Labels: bug, stale

#2290 - Fix description of syslog.severity.name and syslog.severity.code

Pull Request - State: open - Opened by fgierlinger about 1 year ago - 3 comments
Labels: bug, stale

#2288 - Addition of related.mac and related.port

Pull Request - State: open - Opened by hisecu about 1 year ago - 8 comments
Labels: stale

#2288 - Addition of related.mac and related.port

Pull Request - State: open - Opened by hisecu about 1 year ago - 8 comments
Labels: stale

#2287 - Add lowercase normaliser to ECS fields which support security incident response process

Issue - State: open - Opened by mbudge about 1 year ago - 1 comment
Labels: enhancement

#2282 - Tune container image fields to align with Otel SemConv

Pull Request - State: closed - Opened by ChrsMark about 1 year ago - 5 comments

#2282 - Tune container image fields to align with Otel SemConv

Pull Request - State: closed - Opened by ChrsMark about 1 year ago - 5 comments

#2279 - [RFC] Stage 3 for volume device

Pull Request - State: closed - Opened by Trinity2019 about 1 year ago - 1 comment

#2279 - [RFC] Stage 3 for volume device

Pull Request - State: closed - Opened by Trinity2019 about 1 year ago - 1 comment

#2276 - [RFC] Risk Score Extensions - Stage 2

Pull Request - State: open - Opened by rylnd about 1 year ago - 3 comments
Labels: stale

#2276 - [RFC] Risk Score Extensions - Stage 2

Pull Request - State: open - Opened by rylnd about 1 year ago - 3 comments
Labels: stale

#2252 - [RFC] Support id in threat.indicator for STIX 2.1

Issue - State: closed - Opened by brett-fitz about 1 year ago - 6 comments
Labels: enhancement

#2252 - [RFC] Support id in threat.indicator for STIX 2.1

Issue - State: closed - Opened by brett-fitz about 1 year ago - 6 comments
Labels: enhancement

#2235 - Multiple nested fields are missing from generated yml

Issue - State: open - Opened by P1llus over 1 year ago - 2 comments
Labels: bug

#2235 - Multiple nested fields are missing from generated yml

Issue - State: open - Opened by P1llus over 1 year ago - 2 comments
Labels: bug

#2234 - log.offset not ECS compliant?

Issue - State: open - Opened by nicpenning over 1 year ago - 16 comments
Labels: enhancement, discuss

#2234 - log.offset not ECS compliant?

Issue - State: open - Opened by nicpenning over 1 year ago - 16 comments
Labels: enhancement, discuss

#2233 - [RFC] Asset Integrations & Entity Store RFC - Stage 2

Pull Request - State: open - Opened by SourinPaul over 1 year ago - 20 comments
Labels: RFC, stale

#2213 - [main] adding release notes for ecs 8.8 (#2209)

Pull Request - State: closed - Opened by kgeller over 1 year ago - 1 comment
Labels: forward_port

#2212 - [main] Finalize 8.8 changelog (#2208)

Pull Request - State: closed - Opened by kgeller over 1 year ago
Labels: forward_port

#2211 - Introduce process.vpid

Pull Request - State: open - Opened by Tacklebox over 1 year ago

#2210 - Finalize 8.8 version

Pull Request - State: closed - Opened by kgeller over 1 year ago

#2209 - Release notes for 8.8

Pull Request - State: closed - Opened by kgeller over 1 year ago

#2208 - Finalize 8.8 changelog

Pull Request - State: closed - Opened by kgeller over 1 year ago

#2207 - event.type "access" not allowed for event.category "file"

Issue - State: closed - Opened by taylor-swanson over 1 year ago - 1 comment
Labels: bug

#2206 - Adding package.vendor to ECS package mapping

Pull Request - State: open - Opened by lkuik over 1 year ago - 5 comments

#2205 - Adding field vendor.name to Package ECS mapping

Pull Request - State: closed - Opened by lkuik over 1 year ago - 8 comments

#2204 - [8.8] Orchestrator additions for features coming in 8.8 (#2181)

Pull Request - State: closed - Opened by kgeller over 1 year ago
Labels: backport

#2203 - Add ECS field for package.vendor to ecs-packages

Issue - State: open - Opened by lkuik over 1 year ago - 1 comment
Labels: enhancement

#2202 - DO NOT MERGE - testing GH Action - docs comment

Pull Request - State: closed - Opened by ebeahan over 1 year ago - 1 comment

#2201 - [RFC] Stge 0 - New fieldset for volume device

Pull Request - State: open - Opened by Trinity2019 over 1 year ago
Labels: discuss, RFC:candidate

#2200 - [main] Changelog for 8.8 ff (#2198)

Pull Request - State: closed - Opened by kgeller over 1 year ago
Labels: forward_port

#2199 - Adding v8.8 to backport tool

Pull Request - State: closed - Opened by kgeller over 1 year ago

#2198 - 8.8 FF changelog updates

Pull Request - State: closed - Opened by kgeller over 1 year ago
Labels: needs_forward_port

#2197 - Bumping version to 8.9.0-dev for 8.8 FF

Pull Request - State: closed - Opened by kgeller over 1 year ago

#2196 - Add concern about automatic inclusion of dimensions

Pull Request - State: closed - Opened by jsoriano over 1 year ago - 1 comment

#2194 - [RFC] Faas fields - stage 2 - change faas.trigger type from nested to object

Pull Request - State: closed - Opened by gsantoro over 1 year ago - 1 comment

#2193 - update generated files

Pull Request - State: closed - Opened by gsantoro over 1 year ago - 1 comment

#2192 - Remove mapping for field `faas.trigger`

Issue - State: closed - Opened by gsantoro over 1 year ago - 3 comments
Labels: enhancement

#2191 - RFC 0038: Add `event.kind: asset` - stage 2 changes

Pull Request - State: closed - Opened by ebeahan over 1 year ago
Labels: 8.8.0

#2190 - New `agent.forwarder` for identifying relay and forwarding infrastructure

Issue - State: open - Opened by bonifield over 1 year ago
Labels: enhancement

#2189 - Nest cloud fields under source and destination for additional flexibility

Issue - State: open - Opened by bonifield over 1 year ago
Labels: enhancement

#2188 - [8.7.0 forward port] Add 8.7.0 release notes (#2185)

Pull Request - State: closed - Opened by marc-gr over 1 year ago
Labels: forward_port

#2187 - [8.7 forward port] Move 8.7.0 entries from CHANGELOG.next.md to CHANGELOG.md (#2184)

Pull Request - State: closed - Opened by marc-gr over 1 year ago
Labels: forward_port

#2186 - [8.7.0 release] Remove rc1 from version file

Pull Request - State: closed - Opened by marc-gr over 1 year ago

#2185 - [8.7.0 release] Add 8.7.0 release notes

Pull Request - State: closed - Opened by marc-gr over 1 year ago

#2184 - [8.7.0 release] Move 8.7.0 entries from CHANGELOG.next.md to CHANGELOG.md

Pull Request - State: closed - Opened by marc-gr over 1 year ago

#2183 - Add action for Elastic Docs preview link

Pull Request - State: closed - Opened by ebeahan over 1 year ago

#2182 - Trigger elastic/ecs-typescript workflow after ecs-release is published

Pull Request - State: closed - Opened by lgestc over 1 year ago

#2181 - Orchestrator additions for features coming in 8.8

Pull Request - State: closed - Opened by mitodrummer over 1 year ago - 14 comments
Labels: 8.8.0

#2180 - New geo.division (large), geo.district (medium), and geo.center (small) fields

Issue - State: open - Opened by bonifield over 1 year ago - 2 comments
Labels: enhancement

#2179 - Add ability to capture authentication source

Issue - State: open - Opened by bmagistro over 1 year ago - 1 comment
Labels: enhancement

#2178 - [RFC] Extend event.kind allowed values with asset

Pull Request - State: closed - Opened by taylor-swanson over 1 year ago - 1 comment
Labels: RFC

#2177 - The meaning of os.platform is unclear

Issue - State: open - Opened by andrewthad over 1 year ago - 1 comment
Labels: enhancement

#2176 - Support `time_series_metric` attribute in schema and generated artifacts

Issue - State: open - Opened by ebeahan over 1 year ago

#2175 - Windows File Shares (Samba): ShareName and RelativeTargetName

Issue - State: open - Opened by andrewthad over 1 year ago
Labels: enhancement

#2174 - Permit `event.type: access` for `event.category: file` events

Pull Request - State: closed - Opened by ebeahan over 1 year ago
Labels: 8.8.0

#2173 - Extend event.kind allowed values to include asset

Issue - State: open - Opened by taylor-swanson over 1 year ago - 2 comments
Labels: enhancement, RFC:candidate

#2172 - [RFC] Stage 0 - TSDB Dimensions

Pull Request - State: closed - Opened by agithomas over 1 year ago - 22 comments
Labels: RFC, RFC:candidate

#2171 - Opensearch generator

Pull Request - State: closed - Opened by jaakoob over 1 year ago - 1 comment

#2170 - Fix typo

Pull Request - State: closed - Opened by dawei-wang over 1 year ago
Labels: 8.8.0

#2169 - [main][forward-port][8.7-hff] Prepare changelog for 8.7 HFF (#2167)

Pull Request - State: closed - Opened by marc-gr over 1 year ago

#2168 - [8.7] Change version to 8.7.0-rc1

Pull Request - State: closed - Opened by marc-gr over 1 year ago

#2167 - [8.7] Prepare changelog for 8.7 HFF

Pull Request - State: closed - Opened by marc-gr over 1 year ago

#2166 - [backport][8.7] Adding library category to the schema #2154

Pull Request - State: closed - Opened by marc-gr over 1 year ago