ECS & OpenTelemetry
editECS & OpenTelemetry
editIn April 2023, Elastic donated ECS to OpenTelemetry and together with the OTel community jointly announced the intention to achieve convergence of ECS and OTel Semantic Conventions (SemConv). This donation should be seen as a directional decision for the evolution of both standards rather than a single event that merged both schemas into a single standard.
While both schemes complement each other in large areas and thus offer mutual added value and great potential for convergence, it is important to understand that in some areas convergence is not achievable due to conceptual differences or consistency reasons. For example, while ECS contains a few fields (e.g. container.disk.read.bytes) that are meant to be used in a metric-like way, metrics in OpenTelemetry are following a completely different data model (with metric name, type, dimensions, etc.). Also, in OTel semantic conventions there are some stable (or quasi-stable) attributes that have semantically equivalent, stable fields in ECS, however, with different field names. This kind of differences require explicit handling to achieve compatibility.
Relation between ECS and Semantic Conventions
editThe ECS schema files contain an explicit mapping between ECS fields and corresponding OTel semnatic convention attributes. This can be used to generate tooling for compatibility between ECS and semnatic conventions (e.g. alias fields in Elasticsearch). The relation between individual ECS fields and corresponding OTel semantic conventions attributes follows one of the following categories:
Category | Description |
---|---|
The name of the ECS field is identical to the SemConv attribute name and has (practically) the same semantics. |
|
The ECS field name is different but has the same semantics as the corresponding SemConv attribute. For this type of relation aliasing approaches (e.g. Elasticsearch field aliases) can be used to achieve compatibility between ECS and OTel SemConv. |
|
The ECS field name is different and has related - yet different - semantics as the corresponding SemConv attribute. An aliasing approach is not sufficient to resolve compatibility for this type of relation. |
|
The ECS field name is the same as an OTel SemConv namespace or an attribute that has significantly different semantics. |
|
The ECS field has a corresponding representation in OpenTelemetry’s protocol definition. |
|
For this ECS field there is a corresponding metric defined in OTel SemConv. |
|
The ECS field is not applicable in the context of OTel or won’t be aligned due to significant, conceptual conflict with OTel concepts in that area. |
The following documentation pages provide an overview and more details on the alignment between ECS and OTel semantic conventions: