diff --git a/CHANGELOG.next.md b/CHANGELOG.next.md
index f53d23abff..f6bdaf1f73 100644
--- a/CHANGELOG.next.md
+++ b/CHANGELOG.next.md
@@ -49,6 +49,7 @@ Thanks, you're awesome :-) -->
 #### Improvements
 
 * Add support for reusing offical fieldsets in custom schemas. #751
+* Add full path names to reused fieldsets in `nestings` array in ecs_nested.yml. #803
 
 #### Deprecated
 
diff --git a/docs/field-details.asciidoc b/docs/field-details.asciidoc
index 78cc3cd5b8..d7e2917786 100644
--- a/docs/field-details.asciidoc
+++ b/docs/field-details.asciidoc
@@ -453,6 +453,12 @@ example: `co.uk`
 // ===============================================================
 
 
+| <<ecs-group,client.user.group.*>>
+| User's group relevant to the event.
+
+// ===============================================================
+
+
 |=====
 
 [[ecs-cloud]]
@@ -961,6 +967,12 @@ example: `co.uk`
 // ===============================================================
 
 
+| <<ecs-group,destination.user.group.*>>
+| User's group relevant to the event.
+
+// ===============================================================
+
+
 |=====
 
 [[ecs-dll]]
@@ -2692,6 +2704,12 @@ example: `1325`
 // ===============================================================
 
 
+| <<ecs-group,host.user.group.*>>
+| User's group relevant to the event.
+
+// ===============================================================
+
+
 |=====
 
 [[ecs-http]]
@@ -5292,6 +5310,12 @@ example: `co.uk`
 // ===============================================================
 
 
+| <<ecs-group,server.user.group.*>>
+| User's group relevant to the event.
+
+// ===============================================================
+
+
 |=====
 
 [[ecs-service]]
@@ -5627,6 +5651,12 @@ example: `co.uk`
 // ===============================================================
 
 
+| <<ecs-group,source.user.group.*>>
+| User's group relevant to the event.
+
+// ===============================================================
+
+
 |=====
 
 [[ecs-threat]]
diff --git a/generated/ecs/ecs_flat.yml b/generated/ecs/ecs_flat.yml
index 82316f1c4f..bc26afa325 100644
--- a/generated/ecs/ecs_flat.yml
+++ b/generated/ecs/ecs_flat.yml
@@ -118,7 +118,6 @@ as.number:
   name: number
   normalize: []
   order: 0
-  original_fieldset: as
   short: Unique number allocated to the autonomous system. The autonomous system number
     (ASN) uniquely identifies each network on the Internet.
   type: long
@@ -137,7 +136,6 @@ as.organization.name:
   name: organization.name
   normalize: []
   order: 1
-  original_fieldset: as
   short: Organization name.
   type: keyword
 client.address:
@@ -650,7 +648,6 @@ code_signature.exists:
   name: exists
   normalize: []
   order: 0
-  original_fieldset: code_signature
   short: Boolean to capture if a signature is present.
   type: boolean
 code_signature.status:
@@ -667,7 +664,6 @@ code_signature.status:
   name: status
   normalize: []
   order: 4
-  original_fieldset: code_signature
   short: Additional information about the certificate status.
   type: keyword
 code_signature.subject_name:
@@ -680,7 +676,6 @@ code_signature.subject_name:
   name: subject_name
   normalize: []
   order: 1
-  original_fieldset: code_signature
   short: Subject name of the code signer
   type: keyword
 code_signature.trusted:
@@ -695,7 +690,6 @@ code_signature.trusted:
   name: trusted
   normalize: []
   order: 3
-  original_fieldset: code_signature
   short: Stores the trust status of the certificate chain.
   type: boolean
 code_signature.valid:
@@ -710,7 +704,6 @@ code_signature.valid:
   name: valid
   normalize: []
   order: 2
-  original_fieldset: code_signature
   short: Boolean to capture if the digital signature is verified against the binary
     content.
   type: boolean
@@ -3093,7 +3086,6 @@ geo.city_name:
   name: city_name
   normalize: []
   order: 4
-  original_fieldset: geo
   short: City name.
   type: keyword
 geo.continent_name:
@@ -3106,7 +3098,6 @@ geo.continent_name:
   name: continent_name
   normalize: []
   order: 1
-  original_fieldset: geo
   short: Name of the continent.
   type: keyword
 geo.country_iso_code:
@@ -3119,7 +3110,6 @@ geo.country_iso_code:
   name: country_iso_code
   normalize: []
   order: 5
-  original_fieldset: geo
   short: Country ISO code.
   type: keyword
 geo.country_name:
@@ -3132,7 +3122,6 @@ geo.country_name:
   name: country_name
   normalize: []
   order: 2
-  original_fieldset: geo
   short: Country name.
   type: keyword
 geo.location:
@@ -3144,7 +3133,6 @@ geo.location:
   name: location
   normalize: []
   order: 0
-  original_fieldset: geo
   short: Longitude and latitude.
   type: geo_point
 geo.name:
@@ -3163,7 +3151,6 @@ geo.name:
   name: name
   normalize: []
   order: 7
-  original_fieldset: geo
   short: User-defined description of a location.
   type: keyword
 geo.region_iso_code:
@@ -3176,7 +3163,6 @@ geo.region_iso_code:
   name: region_iso_code
   normalize: []
   order: 6
-  original_fieldset: geo
   short: Region ISO code.
   type: keyword
 geo.region_name:
@@ -3189,7 +3175,6 @@ geo.region_name:
   name: region_name
   normalize: []
   order: 3
-  original_fieldset: geo
   short: Region name.
   type: keyword
 group.domain:
@@ -3203,7 +3188,6 @@ group.domain:
   name: domain
   normalize: []
   order: 2
-  original_fieldset: group
   short: Name of the directory the group is a member of.
   type: keyword
 group.id:
@@ -3215,7 +3199,6 @@ group.id:
   name: id
   normalize: []
   order: 0
-  original_fieldset: group
   short: Unique identifier for the group on the system/platform.
   type: keyword
 group.name:
@@ -3227,7 +3210,6 @@ group.name:
   name: name
   normalize: []
   order: 1
-  original_fieldset: group
   short: Name of the group.
   type: keyword
 hash.md5:
@@ -3239,7 +3221,6 @@ hash.md5:
   name: md5
   normalize: []
   order: 0
-  original_fieldset: hash
   short: MD5 hash.
   type: keyword
 hash.sha1:
@@ -3251,7 +3232,6 @@ hash.sha1:
   name: sha1
   normalize: []
   order: 1
-  original_fieldset: hash
   short: SHA1 hash.
   type: keyword
 hash.sha256:
@@ -3263,7 +3243,6 @@ hash.sha256:
   name: sha256
   normalize: []
   order: 2
-  original_fieldset: hash
   short: SHA256 hash.
   type: keyword
 hash.sha512:
@@ -3275,7 +3254,6 @@ hash.sha512:
   name: sha512
   normalize: []
   order: 3
-  original_fieldset: hash
   short: SHA512 hash.
   type: keyword
 host.architecture:
@@ -3864,7 +3842,6 @@ interface.alias:
   name: alias
   normalize: []
   order: 2
-  original_fieldset: interface
   short: Interface alias
   type: keyword
 interface.id:
@@ -3877,7 +3854,6 @@ interface.id:
   name: id
   normalize: []
   order: 0
-  original_fieldset: interface
   short: Interface ID
   type: keyword
 interface.name:
@@ -3890,7 +3866,6 @@ interface.name:
   name: name
   normalize: []
   order: 1
-  original_fieldset: interface
   short: Interface name
   type: keyword
 labels:
@@ -4887,7 +4862,6 @@ os.family:
   name: family
   normalize: []
   order: 3
-  original_fieldset: os
   short: OS family (such as redhat, debian, freebsd, windows).
   type: keyword
 os.full:
@@ -4905,7 +4879,6 @@ os.full:
   name: full
   normalize: []
   order: 2
-  original_fieldset: os
   short: Operating system name, including the version or code name.
   type: keyword
 os.kernel:
@@ -4918,7 +4891,6 @@ os.kernel:
   name: kernel
   normalize: []
   order: 5
-  original_fieldset: os
   short: Operating system kernel version as a raw string.
   type: keyword
 os.name:
@@ -4936,7 +4908,6 @@ os.name:
   name: name
   normalize: []
   order: 1
-  original_fieldset: os
   short: Operating system name, without the version.
   type: keyword
 os.platform:
@@ -4949,7 +4920,6 @@ os.platform:
   name: platform
   normalize: []
   order: 0
-  original_fieldset: os
   short: Operating system platform (such centos, ubuntu, windows).
   type: keyword
 os.version:
@@ -4962,7 +4932,6 @@ os.version:
   name: version
   normalize: []
   order: 4
-  original_fieldset: os
   short: Operating system version as a raw string.
   type: keyword
 package.architecture:
@@ -5150,7 +5119,6 @@ pe.company:
   name: company
   normalize: []
   order: 4
-  original_fieldset: pe
   short: Internal company name of the file, provided at compile-time.
   type: keyword
 pe.description:
@@ -5163,7 +5131,6 @@ pe.description:
   name: description
   normalize: []
   order: 2
-  original_fieldset: pe
   short: Internal description of the file, provided at compile-time.
   type: keyword
 pe.file_version:
@@ -5176,7 +5143,6 @@ pe.file_version:
   name: file_version
   normalize: []
   order: 1
-  original_fieldset: pe
   short: Process name.
   type: keyword
 pe.imphash:
@@ -5206,7 +5172,6 @@ pe.original_file_name:
   name: original_file_name
   normalize: []
   order: 0
-  original_fieldset: pe
   short: Internal name of the file, provided at compile-time.
   type: keyword
 pe.product:
@@ -5219,7 +5184,6 @@ pe.product:
   name: product
   normalize: []
   order: 3
-  original_fieldset: pe
   short: Internal product name of the file, provided at compile-time.
   type: keyword
 process.args:
@@ -8110,7 +8074,6 @@ user.domain:
   name: domain
   normalize: []
   order: 5
-  original_fieldset: user
   short: Name of the directory the user is a member of.
   type: keyword
 user.email:
@@ -8122,7 +8085,6 @@ user.email:
   name: email
   normalize: []
   order: 3
-  original_fieldset: user
   short: User email address.
   type: keyword
 user.full_name:
@@ -8140,7 +8102,6 @@ user.full_name:
   name: full_name
   normalize: []
   order: 2
-  original_fieldset: user
   short: User's full name, if available.
   type: keyword
 user.group.domain:
@@ -8194,7 +8155,6 @@ user.hash:
   name: hash
   normalize: []
   order: 4
-  original_fieldset: user
   short: Unique user hash to correlate information for a user in anonymized form.
   type: keyword
 user.id:
@@ -8206,7 +8166,6 @@ user.id:
   name: id
   normalize: []
   order: 0
-  original_fieldset: user
   short: Unique identifier of the user.
   type: keyword
 user.name:
@@ -8224,7 +8183,6 @@ user.name:
   name: name
   normalize: []
   order: 1
-  original_fieldset: user
   short: Short name or login of the user.
   type: keyword
 user_agent.device.name:
@@ -8379,7 +8337,6 @@ vlan.id:
   name: id
   normalize: []
   order: 0
-  original_fieldset: vlan
   short: VLAN ID as reported by the observer.
   type: keyword
 vlan.name:
@@ -8392,7 +8349,6 @@ vlan.name:
   name: name
   normalize: []
   order: 1
-  original_fieldset: vlan
   short: Optional VLAN name as reported by the observer.
   type: keyword
 vulnerability.category:
diff --git a/generated/ecs/ecs_nested.yml b/generated/ecs/ecs_nested.yml
index f8d5cb623c..2731965a91 100644
--- a/generated/ecs/ecs_nested.yml
+++ b/generated/ecs/ecs_nested.yml
@@ -669,9 +669,10 @@ client:
   group: 2
   name: client
   nestings:
-  - as
-  - geo
-  - user
+  - client.as
+  - client.geo
+  - client.user
+  - client.user.group
   prefix: client.
   short: Fields about the client side of a network connection, used with server.
   title: Client
@@ -1363,9 +1364,10 @@ destination:
   group: 2
   name: destination
   nestings:
-  - as
-  - geo
-  - user
+  - destination.as
+  - destination.geo
+  - destination.user
+  - destination.user.group
   prefix: destination.
   short: Fields about the destination side of a network connection, used with source.
   title: Destination
@@ -1629,9 +1631,9 @@ dll:
   group: 2
   name: dll
   nestings:
-  - code_signature
-  - hash
-  - pe
+  - dll.code_signature
+  - dll.hash
+  - dll.pe
   prefix: dll.
   short: These fields contain information about code libraries dynamically loaded
     into processes.
@@ -3368,9 +3370,9 @@ file:
   group: 2
   name: file
   nestings:
-  - code_signature
-  - hash
-  - pe
+  - file.code_signature
+  - file.hash
+  - file.pe
   prefix: file.
   short: Fields describing files.
   title: File
@@ -4066,9 +4068,10 @@ host:
   group: 2
   name: host
   nestings:
-  - geo
-  - os
-  - user
+  - host.geo
+  - host.os
+  - host.user
+  - host.user.group
   prefix: host.
   short: Fields describing the relevant computing instance.
   title: Host
@@ -4727,7 +4730,8 @@ network:
   group: 2
   name: network
   nestings:
-  - vlan
+  - network.inner.vlan
+  - network.vlan
   prefix: network.
   short: Fields describing the communication path over which the event happened.
   title: Network
@@ -5248,10 +5252,12 @@ observer:
   group: 2
   name: observer
   nestings:
-  - geo
-  - interface
-  - os
-  - vlan
+  - observer.egress.interface
+  - observer.egress.vlan
+  - observer.geo
+  - observer.ingress.interface
+  - observer.ingress.vlan
+  - observer.os
   prefix: observer.
   short: Fields describing an entity observing the event from outside the host.
   title: Observer
@@ -6502,9 +6508,11 @@ process:
   group: 2
   name: process
   nestings:
-  - code_signature
-  - hash
-  - pe
+  - process.code_signature
+  - process.hash
+  - process.parent.code_signature
+  - process.parent.hash
+  - process.pe
   prefix: process.
   short: These fields contain information about a process.
   title: Process
@@ -7354,9 +7362,10 @@ server:
   group: 2
   name: server
   nestings:
-  - as
-  - geo
-  - user
+  - server.as
+  - server.geo
+  - server.user
+  - server.user.group
   prefix: server.
   short: Fields about the server side of a network connection, used with client.
   title: Server
@@ -7915,9 +7924,10 @@ source:
   group: 2
   name: source
   nestings:
-  - as
-  - geo
-  - user
+  - source.as
+  - source.geo
+  - source.user
+  - source.user.group
   prefix: source.
   short: Fields about the source side of a network connection, used with destination.
   title: Source
@@ -8858,7 +8868,7 @@ user:
   group: 2
   name: user
   nestings:
-  - group
+  - user.group
   prefix: user.
   reusable:
     expected:
@@ -9021,7 +9031,7 @@ user_agent:
   group: 2
   name: user_agent
   nestings:
-  - os
+  - user_agent.os
   prefix: user_agent.
   short: Fields to describe a browser user_agent string.
   title: User agent
diff --git a/scripts/generator.py b/scripts/generator.py
index b232197d38..12a392c31a 100644
--- a/scripts/generator.py
+++ b/scripts/generator.py
@@ -57,8 +57,10 @@ def main():
 
     csv_generator.generate(flat, ecs_version, out_dir)
     es_template.generate(flat, ecs_version, out_dir)
+    if args.include or args.subset:
+        exit()
     beats.generate(nested, ecs_version, out_dir)
-    asciidoc_fields.generate(nested, flat, ecs_version, docs_dir)
+    asciidoc_fields.generate(intermediate_fields, ecs_version, docs_dir)
 
 
 def argument_parser():
diff --git a/scripts/generators/asciidoc_fields.py b/scripts/generators/asciidoc_fields.py
index df5931bce8..84096b5332 100644
--- a/scripts/generators/asciidoc_fields.py
+++ b/scripts/generators/asciidoc_fields.py
@@ -2,10 +2,10 @@
 from generators import ecs_helpers
 
 
-def generate(ecs_nested, ecs_flat, ecs_version, out_dir):
-    save_asciidoc(join(out_dir, 'fields.asciidoc'), page_field_index(ecs_nested, ecs_version))
-    save_asciidoc(join(out_dir, 'field-details.asciidoc'), page_field_details(ecs_nested))
-    save_asciidoc(join(out_dir, 'field-values.asciidoc'), page_field_values(ecs_flat))
+def generate(intermediate_nested, ecs_version, out_dir):
+    save_asciidoc(join(out_dir, 'fields.asciidoc'), page_field_index(intermediate_nested, ecs_version))
+    save_asciidoc(join(out_dir, 'field-details.asciidoc'), page_field_details(intermediate_nested))
+    save_asciidoc(join(out_dir, 'field-values.asciidoc'), page_field_values(intermediate_nested))
 
 # Helpers
 
@@ -20,9 +20,9 @@ def save_asciidoc(file, text):
 # Field Index
 
 
-def page_field_index(ecs_nested, ecs_version):
+def page_field_index(intermediate_nested, ecs_version):
     page_text = index_header(ecs_version)
-    for fieldset in ecs_helpers.dict_sorted_by_keys(ecs_nested, ['group', 'name']):
+    for fieldset in ecs_helpers.dict_sorted_by_keys(intermediate_nested, ['group', 'name']):
         page_text += render_field_index_row(fieldset)
     page_text += table_footer()
     page_text += index_footer()
@@ -39,29 +39,37 @@ def render_field_index_row(fieldset):
 
 # Field Details Page
 
-def page_field_details(ecs_nested):
+def page_field_details(intermediate_nested):
     page_text = ''
-    for fieldset in ecs_helpers.dict_sorted_by_keys(ecs_nested, ['group', 'name']):
-        page_text += render_fieldset(fieldset, ecs_nested)
+    for fieldset in ecs_helpers.dict_sorted_by_keys(intermediate_nested, ['group', 'name']):
+        page_text += render_fieldset(fieldset, intermediate_nested)
     return page_text
 
 
-def render_fieldset(fieldset, ecs_nested):
+def render_fieldset(fieldset, intermediate_nested):
     text = field_details_table_header().format(
         fieldset_title=fieldset['title'],
         fieldset_name=fieldset['name'],
         fieldset_description=render_asciidoc_paragraphs(fieldset['description'])
     )
 
-    for field in ecs_helpers.dict_sorted_by_keys(fieldset['fields'], 'flat_name'):
-        # Skip fields nested in this field set
-        if 'original_fieldset' not in field:
-            text += render_field_details_row(field)
+    text += render_fields(fieldset['fields'])
 
     text += table_footer()
 
-    text += render_fieldset_reuse_section(fieldset, ecs_nested)
+    text += render_fieldset_reuse_section(fieldset, intermediate_nested)
+
+    return text
+
 
+def render_fields(fields):
+    text = ''
+    for field_name, field in sorted(fields.items()):
+        # Skip fields nested in this field set
+        if 'field_details' in field and 'original_fieldset' not in field['field_details']:
+            text += render_field_details_row(field['field_details'])
+        if 'fields' in field:
+            text += render_fields(field['fields'])
     return text
 
 
@@ -109,7 +117,7 @@ def render_field_details_row(field):
     return text
 
 
-def render_fieldset_reuse_section(fieldset, ecs_nested):
+def render_fieldset_reuse_section(fieldset, intermediate_nested):
     '''Render the section on where field set can be nested, and which field sets can be nested here'''
     if not ('nestings' in fieldset or 'reusable' in fieldset):
         return ''
@@ -124,18 +132,12 @@ def render_fieldset_reuse_section(fieldset, ecs_nested):
         )
         rows = []
         for nested_fs_name in fieldset['nestings']:
-            ecs = ecs_nested[nested_fs_name]
-            if 'reusable' in ecs:
-                target_fields = filter(lambda x: x == fieldset['name'] or x.startswith(
-                    fieldset['name'] + '.'), ecs['reusable']['expected'])
-            else:
-                target_fields = [fieldset['name']]
-            for field in target_fields:
-                rows.append({
-                    'flat_nesting': "{}.{}.*".format(field, nested_fs_name),
-                    'name': nested_fs_name,
-                    'short': ecs['short']
-                })
+            ecs = ecs_helpers.get_nested_field(nested_fs_name, intermediate_nested)
+            rows.append({
+                'flat_nesting': "{}.*".format(nested_fs_name),
+                'name': nested_fs_name.split('.')[-1],
+                'short': ecs['short']
+            })
         for row in sorted(rows, key=lambda x: x['flat_nesting']):
             text += render_nesting_row(row)
         text += table_footer()
@@ -309,11 +311,12 @@ def nestings_row():
 # Allowed values section
 
 
-def page_field_values(ecs_flat):
+def page_field_values(intermediate_nested):
     section_text = values_section_header()
     category_fields = ['event.kind', 'event.category', 'event.type', 'event.outcome']
     for cat_field in category_fields:
-        section_text += render_field_values_page(ecs_flat[cat_field])
+        section_text += render_field_values_page(ecs_helpers.get_nested_field(cat_field,
+                                                                              intermediate_nested)['field_details'])
     return section_text
 
 
diff --git a/scripts/generators/ecs_helpers.py b/scripts/generators/ecs_helpers.py
index cce9792e24..4d58256055 100644
--- a/scripts/generators/ecs_helpers.py
+++ b/scripts/generators/ecs_helpers.py
@@ -133,3 +133,12 @@ def list_split_by(lst, size):
     for i in range(0, len(lst), size):
         acc.append(lst[i:i + size])
     return acc
+
+
+def get_nested_field(fieldname, field_dict):
+    """Takes a field name in dot notation and a dictionary of fields and finds the field in the dictionary"""
+    fields = fieldname.split('.')
+    nested_field = field_dict[fields[0]]
+    for field in fields[1:]:
+        nested_field = nested_field['fields'][field]
+    return nested_field
\ No newline at end of file
diff --git a/scripts/schema_reader.py b/scripts/schema_reader.py
index 01a8766a29..cb22ddc709 100644
--- a/scripts/schema_reader.py
+++ b/scripts/schema_reader.py
@@ -168,10 +168,6 @@ def duplicate_reusable_fieldsets(schema, fields_nested):
             top_level = split_flat_name[0]
             # List field set names expected under another field set.
             # E.g. host.nestings = [ 'geo', 'os', 'user' ]
-            nestings = fields_nested[top_level].setdefault('nestings', [])
-            if schema['name'] not in nestings:
-                nestings.append(schema['name'])
-            nestings.sort()
             nested_schema = fields_nested[top_level]['fields']
             for level in split_flat_name[1:]:
                 nested_schema = nested_schema.get(level, None)
@@ -183,6 +179,17 @@ def duplicate_reusable_fieldsets(schema, fields_nested):
                 nested_schema = nested_schema.setdefault('fields', {})
             nested_schema[schema['name']] = schema
 
+
+def find_nestings(fields, prefix):
+    """Recursively finds all reusable fields in the fields dictionary."""
+    nestings = []
+    for field_name, field in fields.items():
+        if 'reusable' in field:
+            nestings.append(prefix + field_name)
+        if 'fields' in field:
+            nestings.extend(find_nestings(field['fields'], prefix + field_name + '.'))
+    return nestings
+
 # Main
 
 
@@ -202,22 +209,17 @@ def assemble_reusables(fields_nested):
         duplicate_reusable_fieldsets(schema, fields_nested)
 
 
-def flatten_fields(fields, key_prefix, original_fieldset=None):
+def flatten_fields(fields, key_prefix):
     flat_fields = {}
     for (name, field) in fields.items():
         new_key = key_prefix + name
-        temp_original_fieldset = original_fieldset
-        if 'reusable' in field:
-            temp_original_fieldset = name
         if 'field_details' in field:
             flat_fields[new_key] = field['field_details'].copy()
-            if temp_original_fieldset:
-                flat_fields[new_key]['original_fieldset'] = temp_original_fieldset
         if 'fields' in field:
             new_prefix = new_key + "."
             if 'root' in field and field['root']:
                 new_prefix = ""
-            flat_fields.update(flatten_fields(field['fields'], new_prefix, temp_original_fieldset))
+            flat_fields.update(flatten_fields(field['fields'], new_prefix))
     return flat_fields
 
 
@@ -235,17 +237,20 @@ def generate_fully_flattened_fields(fields_nested):
     return flatten_fields(fields_nested, "")
 
 
-def cleanup_fields_recursive(fields, prefix):
+def cleanup_fields_recursive(fields, prefix, original_fieldset=None):
     for (name, field) in fields.items():
         # Copy field here so reusable field sets become unique copies instead of references to the original set
         field = field.copy()
         fields[name] = field
+        temp_original_fieldset = name if ('reusable' in field and prefix != "") else original_fieldset
         if 'field_details' in field:
             # Deep copy the field details so we can insert different flat names for each reusable fieldset
             field_details = copy.deepcopy(field['field_details'])
             new_flat_name = prefix + name
             field_details['flat_name'] = new_flat_name
             field_details['dashed_name'] = new_flat_name.replace('.', '-').replace('_', '-')
+            if temp_original_fieldset:
+                field_details['original_fieldset'] = temp_original_fieldset
             dict_clean_string_values(field_details)
             field_set_defaults(field_details)
             field['field_details'] = field_details
@@ -254,7 +259,7 @@ def cleanup_fields_recursive(fields, prefix):
             new_prefix = prefix + name + "."
             if 'root' in field and field['root']:
                 new_prefix = ""
-            cleanup_fields_recursive(field['fields'], new_prefix)
+            cleanup_fields_recursive(field['fields'], new_prefix, temp_original_fieldset)
 
 
 def load_schemas(files=ecs_files()):
@@ -267,6 +272,11 @@ def load_schemas(files=ecs_files()):
 def generate_nested_flat(fields_intermediate):
     assemble_reusables(fields_intermediate)
     cleanup_fields_recursive(fields_intermediate, "")
+    for field_name, field in fields_intermediate.items():
+        nestings = find_nestings(field['fields'], field_name + ".")
+        nestings.sort()
+        if len(nestings) > 0:
+            field['nestings'] = nestings
     fields_nested = generate_partially_flattened_fields(fields_intermediate)
     fields_flat = generate_fully_flattened_fields(fields_intermediate)
     return (fields_nested, fields_flat)
diff --git a/scripts/tests/test_ecs_helpers.py b/scripts/tests/test_ecs_helpers.py
index 2c58c3a09f..915cc20496 100644
--- a/scripts/tests/test_ecs_helpers.py
+++ b/scripts/tests/test_ecs_helpers.py
@@ -198,6 +198,39 @@ def test_fields_subset(self):
         actual = ecs_helpers.fields_subset(subset, fields)
         self.assertEqual(actual, expected)
 
+    def test_get_nested_field(self):
+        fields = {
+            'test_fieldset': {
+                'name': 'test_fieldset',
+                'fields': {
+                    'test_field1': {
+                        'field_details': {
+                            'name': 'test_field1',
+                            'type': 'keyword',
+                            'description': 'A test field'
+                        }
+                    },
+                    'test_field2': {
+                        'field_details': {
+                            'name': 'test_field2',
+                            'type': 'keyword',
+                            'description': 'Another test field'
+                        }
+                    }
+                }
+            }
+        }
+        nested_field_name = 'test_fieldset.test_field1'
+        expected = {
+            'field_details': {
+                'name': 'test_field1',
+                'type': 'keyword',
+                'description': 'A test field'
+            }
+        }
+        actual = ecs_helpers.get_nested_field(nested_field_name, fields)
+        self.assertEqual(actual, expected)
+
 
 if __name__ == '__main__':
     unittest.main()
diff --git a/scripts/tests/test_schema_reader.py b/scripts/tests/test_schema_reader.py
index f94a571adc..a8ea4d3799 100644
--- a/scripts/tests/test_schema_reader.py
+++ b/scripts/tests/test_schema_reader.py
@@ -120,43 +120,6 @@ def test_flatten_fields(self):
         }
         self.assertEqual(flat_fields, expected)
 
-    def test_flatten_fields_reusable(self):
-        fields = {
-            'top_level': {
-                'field_details': {
-                    'name': 'top_level'
-                },
-                'fields': {
-                    'nested_field': {
-                        'reusable': {
-                            'top_level': False,
-                            'expected': [
-                                'top_level'
-                            ]
-                        },
-                        'fields': {
-                            'double_nested_field': {
-                                'field_details': {
-                                    'name': 'double_nested_field'
-                                }
-                            }
-                        }
-                    }
-                }
-            }
-        }
-        flat_fields = schema_reader.flatten_fields(fields, "")
-        expected = {
-            'top_level': {
-                'name': 'top_level'
-            },
-            'top_level.nested_field.double_nested_field': {
-                'name': 'double_nested_field',
-                'original_fieldset': 'nested_field'
-            }
-        }
-        self.assertEqual(flat_fields, expected)
-
     def test_cleanup_fields_recursive(self):
         """Reuse a fieldset under two other fieldsets and check that the flat names are properly generated."""
         reusable = {
@@ -215,6 +178,7 @@ def test_cleanup_fields_recursive(self):
                                     'ignore_above': 1024,
                                     'short': 'A test field',
                                     'normalize': [],
+                                    'original_fieldset': 'reusable_fieldset'
                                 }
                             }
                         }
@@ -243,7 +207,7 @@ def test_cleanup_fields_recursive(self):
                                     'ignore_above': 1024,
                                     'short': 'A test field',
                                     'normalize': [],
-
+                                    'original_fieldset': 'reusable_fieldset'
                                 }
                             }
                         }
@@ -479,6 +443,44 @@ def test_improper_reusable_fails(self):
         with self.assertRaises(ValueError):
             schema_reader.duplicate_reusable_fieldsets(fieldset['reusable_fieldset2'], fieldset)
 
+    def test_find_nestings(self):
+        field = {
+            'sub_field': {
+                'reusable': {
+                    'top_level': True,
+                    'expected': [
+                        'some_other_field'
+                    ]
+                },
+                'fields': {
+                    'reusable_fieldset1': {
+                        'name': 'reusable_fieldset1',
+                        'reusable': {
+                            'top_level': False,
+                            'expected': [
+                                'sub_field'
+                            ]
+                        },
+                        'fields': {
+                            'nested_reusable_field': {
+                                'reusable': {
+                                    'top_level': False,
+                                    'expected': 'sub_field.nested_reusable_field'
+                                },
+                                'field_details': {
+                                    'name': 'reusable_field',
+                                    'type': 'keyword',
+                                    'description': 'A test field'
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+        }
+        expected = ['sub_field.reusable_fieldset1', 'sub_field.reusable_fieldset1.nested_reusable_field']
+        self.assertEqual(schema_reader.find_nestings(field['sub_field']['fields'], 'sub_field.'), expected)
+
 
 if __name__ == '__main__':
     unittest.main()