Remove duplicated field process.entity_id (#17089)

Auditbeat was declaring this field before it was introduced in ECS 1.5 leading to duplication. Fixes #17042
elastic · Mar 18, 2020 · f01a126 · f01a126
1 parent 07cc032
commit f01a126
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 16 deletions.
diff --git a/auditbeat/docs/fields.asciidoc b/auditbeat/docs/fields.asciidoc
@@ -10195,16 +10195,6 @@ type: keyword
 --
 
 
-*`process.entity_id`*::
-+
---
-ID uniquely identifying the process. It is computed as a SHA-256 hash of the host ID, PID, and process start time.
-
-
-type: keyword
-
---
-
 [float]
 === hash
 

diff --git a/x-pack/auditbeat/module/system/_meta/fields.yml b/x-pack/auditbeat/module/system/_meta/fields.yml
@@ -30,11 +30,6 @@
   - name: process
     type: group
     fields:
-    - name: entity_id
-      type: keyword
-      description: >
-        ID uniquely identifying the process. It is computed as a SHA-256 hash of the
-        host ID, PID, and process start time.
     - name: hash
       type: group
       description: >

diff --git a/x-pack/auditbeat/module/system/fields.go b/x-pack/auditbeat/module/system/fields.go