Skip to content

Commit

Permalink
Deprecate event.dataset
Browse files Browse the repository at this point in the history
With elastic#845 stream.dataset is introduced. Even though event.dataset is still heavily used, users should start to switch over to using stream.dataset. I expect event.dataset to be remove from ECS in the next major version.

stream.dataset and event.dataset have the same content but are not of the same type. First one is constant_keyword, other one keyword. On the query side this should not make a difference but not sure if it is possible to use alias to reference one to an other.
  • Loading branch information
ruflin committed May 13, 2020
1 parent 3c20a9c commit 3db3409
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 0 deletions.
1 change: 1 addition & 0 deletions generated/ecs/ecs_flat.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1837,6 +1837,7 @@ event.created:
type: date
event.dataset:
dashed_name: event-dataset
deprecated: true
description: 'Name of the dataset.
If an event source publishes more than one type of log or events (e.g. access
Expand Down
1 change: 1 addition & 0 deletions generated/ecs/ecs_nested.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2188,6 +2188,7 @@ event:
type: date
dataset:
dashed_name: event-dataset
deprecated: true
description: 'Name of the dataset.
If an event source publishes more than one type of log or events (e.g. access
Expand Down
1 change: 1 addition & 0 deletions schemas/event.yml
Original file line number Diff line number Diff line change
Expand Up @@ -514,6 +514,7 @@
It's recommended but not required to start the dataset name with
the module name, followed by a dot, then the dataset name.
example: apache.access
deprecated: true

- name: provider
level: extended
Expand Down

0 comments on commit 3db3409

Please sign in to comment.