[1.x] add related.hosts (elastic#913) (elastic#924)

ebeahan · Aug 25, 2020 · f2eb3a4 · f2eb3a4
1 parent d532d6e
commit f2eb3a4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/generated/csv/fields.csv b/generated/csv/fields.csv
@@ -442,6 +442,7 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description
 1.7.0-dev,true,registry,registry.path,keyword,core,,HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winword.exe\Debugger,"Full path, including hive, key and value"
 1.7.0-dev,true,registry,registry.value,keyword,core,,Debugger,Name of the value written.
 1.7.0-dev,true,related,related.hash,keyword,extended,array,,All the hashes seen on your event.
+1.7.0-dev,true,related,related.hosts,keyword,extended,array,,All the host identifiers seen on your event.
 1.7.0-dev,true,related,related.ip,ip,extended,array,,All of the IPs seen on your event.
 1.7.0-dev,true,related,related.user,keyword,extended,array,,All the user names seen on your event.
 1.7.0-dev,true,rule,rule.author,keyword,extended,array,['Star-Lord'],Rule author