[WIP] Removes "required" field attribute

package/endpoint/data_stream/action_responses/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -155,10 +154,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/actions/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -161,10 +160,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/alerts/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -3241,10 +3240,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/api/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -126,10 +125,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/collection/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -45,10 +44,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/file/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -251,11 +250,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
-
+      description: 'ECS version this event conforms to.
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0
 - name: event

package/endpoint/data_stream/heartbeat/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 

package/endpoint/data_stream/library/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -494,10 +493,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/metadata/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -153,10 +152,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/metrics/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -755,10 +754,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/network/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -310,10 +309,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/policy/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -490,10 +489,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/process/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -266,10 +265,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/registry/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -210,10 +209,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0

package/endpoint/data_stream/security/fields/fields.yml

@@ -1,6 +1,5 @@
 - name: '@timestamp'
   level: core
-  required: true
   type: date
   description: 'Date/time when the event originated.
 
@@ -170,10 +169,9 @@
   fields:
     - name: version
       level: core
-      required: true
       type: keyword
       ignore_above: 1024
-      description: 'ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
+      description: 'ECS version this event conforms to.
 
         When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.'
       example: 1.0.0