A newer version is available. For the latest information, see the
current release documentation.
ECS Fields
editECS Fields
editMeta-information specific to ECS.
ECS Field Details
editField | Description | Level |
---|---|---|
ECS version this event conforms to. When querying across multiple indices — which may conform to slightly different ECS versions — this field lets integrations adjust to the schema version of the events. type: keyword example: |
core |