Attempt at aliasing system.syslog fields to their ECS counterpart.

elastic · Nov 22, 2018 · dc67401 · dc67401
1 parent 712d3bd
commit dc67401
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 29 deletions.
diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc
@@ -6370,45 +6370,38 @@ Contains fields from the syslog system logs.
 
 
 
-*`system.syslog.timestamp`*::
+*`@timestamp`*::
 +
 --
-The timestamp as read from the syslog message.
-
+type: alias
 
 --
 
-*`system.syslog.hostname`*::
+*`host.hostname`*::
 +
 --
-The hostname as read from the syslog message.
-
+type: alias
 
 --
 
-*`system.syslog.program`*::
+*`process.name`*::
 +
 --
-The process name as read from the syslog message.
-
+type: alias
 
 --
 
-*`system.syslog.pid`*::
+*`process.pid`*::
 +
 --
-The PID of the process that sent the syslog message.
-
+type: alias
 
 --
 
-*`system.syslog.message`*::
+*`message`*::
 +
 --
-type: text
-
-The message in the log line.
-
+type: alias
 
 --