Add ecs fields in container logs - #2033
Conversation
|
Pinging @elastic/integrations (Team:Integrations) |
💚 Build Succeeded
Expand to view the summary
Build stats
Test stats 🧪
🤖 GitHub commentsTo re-run your PR in the CI, just comment with:
|
…soulis/integrations into add_ecs_fields_container_logs
|
/test |
ChrsMark
left a comment
There was a problem hiding this comment.
lgtm, apart of the conflicts :).
Btw will we change the type of the message to text too here or in another PR?
|
There was a problem hiding this comment.
Ok, so we are just fine with https://github.com/elastic/integrations/pull/2033/files#diff-737e87b60df2c6af40cd83068b0b27dbec3c5145b13cc060d3522531595e2fefR18. Gotcha. ![]()
* Add ecs fields in container logs
What does this PR do?
This PR adds ecs fields in container_logs data stream of kubernetes integrations.
Without the declaration of those fields the mappings where taking default types which is not optimal in all cases.
An example is the message field which as a default was mapped to
keywordinstead oftext. (https://elastic.slack.com/archives/CJZ9U5G9X/p1635183286042600)Checklist
changelog.ymlfile.manifest.ymlfile to point to the latest Elastic stack release (e.g.^7.13.0).