Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[ECS] nginx.access.remote_ip should map to source.address #11510

Closed
EthanStrider opened this issue Mar 28, 2019 · 0 comments
Closed

[ECS] nginx.access.remote_ip should map to source.address #11510

EthanStrider opened this issue Mar 28, 2019 · 0 comments
Assignees
@webmat

Comments

@EthanStrider
Copy link

Currently, nginx.access.remote_ip does not map to source.address

apache2.access.remote_ip    ----->     source.address
iis.access.remote_ip        ----->     source.address
iis.error.remote_ip         ----->     source.address
traefik.access.remote_ip    ----->     source.address
nginx.access.remote_ip      --/-->     source.address

Source: https://www.elastic.co/guide/en/beats/libbeat/7.0/breaking-changes-7.0.html

For consistency sake, it probably should.
@webmat webmat self-assigned this Mar 28, 2019
@webmat webmat mentioned this issue Mar 28, 2019
Merged
ruflin pushed a commit that referenced this issue Mar 29, 2019
@webmat @ruflin
Fix field alias for nginx.access.remote_ip (#11512)
692ef9e 
- It was missing in the breaking changes doc (generated from ecs-migration.yml)
- The actual field alias was incorrectly pointing to source.ip, this has been
  adjusted to source.address
- Re-generating the documentation file also updated the breaking changes to
  include a change introduced in #11334

This should be backported to 7.0.

Closes #11510
ruflin pushed a commit to ruflin/beats that referenced this issue Mar 29, 2019
@webmat @ruflin
Fix field alias for nginx.access.remote_ip (elastic#11512)
1d38cc9 
- It was missing in the breaking changes doc (generated from ecs-migration.yml)
- The actual field alias was incorrectly pointing to source.ip, this has been
  adjusted to source.address
- Re-generating the documentation file also updated the breaking changes to
  include a change introduced in elastic#11334

This should be backported to 7.0.

Closes elastic#11510

(cherry picked from commit 692ef9e)
@ruflin ruflin mentioned this issue Mar 29, 2019
Merged
ruflin added a commit that referenced this issue Mar 29, 2019
@ruflin
Fix field alias for nginx.access.remote_ip (#11512) (#11531)
3c59cc8 
- It was missing in the breaking changes doc (generated from ecs-migration.yml)
- The actual field alias was incorrectly pointing to source.ip, this has been
  adjusted to source.address
- Re-generating the documentation file also updated the breaking changes to
  include a change introduced in #11334

This should be backported to 7.0.

Closes #11510

(cherry picked from commit 692ef9e)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@webmat webmat

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@webmat @EthanStrider