From ee729f53d018ad51d326784aac85b42d5dfacc58 Mon Sep 17 00:00:00 2001 From: "Lee E. Hinman" Date: Mon, 27 Apr 2020 15:20:50 -0500 Subject: [PATCH] Document recent changes to nginx fileset as breaking changes PR #17844 introduced the following changes: - http.request.method is now lowercase - http.request.referrer is only set when nginx provides a value This PR updates the CHANGELOG to report this as a breaking change. --- CHANGELOG.next.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index f3c8f6d274e..ed29376fb56 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -21,6 +21,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d *Filebeat* - Improve ECS field mappings in panw module. event.outcome now only contains success/failure per ECS specification. {issue}16025[16025] {pull}17910[17910] +- Improve ECS categorization field mappings for nginx module. http.request.referrer is now lowercase & http.request.referrer only populated when nginx sets a value {issue}16174[16174] {pull}17844[17844] *Heartbeat* @@ -271,7 +272,6 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d - Enhance `elasticsearch/slowlog` fileset to handle ECS-compatible logs emitted by Elasticsearch. {issue}17715[17715] {pull}17729[17729] - Improve ECS categorization field mappings in misp module. {issue}16026[16026] {pull}17344[17344] - Added Unix stream socket support as an input source and a syslog input source. {pull}17492[17492] -- Improve ECS categorization field mappings for nginx module. {issue}16174[16174] {pull}17844[17844] - Improve ECS categorization field mappings in postgresql module. {issue}16177[16177] {pull}17914[17914] - Improve ECS categorization field mappings in rabbitmq module. {issue}16178[16178] {pull}17916[17916] - Improve ECS categorization field mappings in redis module. {issue}16179[16179] {pull}17918[17918]