-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update migration file to new structure #9381
Conversation
Pinging @elastic/infrastructure |
160bda9
to
388e342
Compare
dev-tools/ecs-migration.yml
Outdated
@@ -6,44 +6,46 @@ | |||
# | |||
# - from: source-field-in-6.x | |||
# to: target-filed-in-ECS | |||
# # Alias field is useful for fields where there is a 1-1 mapping from old to new | |||
# alias: true-if-alias-is-required-in-6x | |||
# # Alias field is useful for fields where many-11 mapping from new to old are needed |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
many-1
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't see that fix. Have you pushed? 😂
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. Just a nit about adding a comment for the meaning when alias6
is absent
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@webmat would be great if you could go through the fields to make sure there are no mistakes inside.
dev-tools/ecs-migration.yml
Outdated
@@ -6,44 +6,46 @@ | |||
# | |||
# - from: source-field-in-6.x | |||
# to: target-filed-in-ECS | |||
# # Alias field is useful for fields where there is a 1-1 mapping from old to new | |||
# alias: true-if-alias-is-required-in-6x | |||
# # Alias field is useful for fields where many-11 mapping from new to old are needed |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
Yeah I did read through quickly. Will pore through it one more time. |
The new structure makes it clear which alias have to happen in 6.x and which ones in 7.x
388e342
to
782a491
Compare
alias: true | ||
copy_to: false | ||
|
||
- from: beat.hostname | ||
to: agent.hostname |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@MikePaquette is pushing back on agent.hostname
, btw.
Agent should always be running on the host itself. If the monitoring agent is outside of the host, it should be represented in observer.hostname
(used to be called device.hostname
, but device is being renamed to observer).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should be addressed in another PR, though.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I went through the file again. The mappings look good, but I think the Auditbeat mapping should be removed.
There should be a pull request to address Auditbeat in its entirety.
The new structure makes it clear which alias have to happen in 6.x and which ones in 7.x