Add error.type field (#566)

CHANGELOG.next.md

@@ -12,6 +12,7 @@ Thanks, you're awesome :-) -->
 ### Added
 * Added `error.stack_trace` field. #562
 * Added `log.origin.file.name`, `log.origin.function` and `log.origin.file.line` fields. #563
+* Added `error.type` field. #566
 
 ### Improvements
 

docs/field-details.asciidoc

@@ -1025,6 +1025,17 @@ type: keyword
 
 
 
+| extended
+
+// ===============================================================
+
+| error.type
+| The type of the error, for example the class name of the exception.
+
+type: keyword
+
+example: `java.lang.NullPointerException`
+
 | extended
 
 // ===============================================================

generated/beats/fields.ecs.yml

@@ -818,6 +818,12 @@
  type: keyword
  ignore_above: 1024
  description: The stack trace of this error in plain text.
+ - name: type
+ level: extended
+ type: keyword
+ ignore_above: 1024
+ description: The type of the error, for example the class name of the exception.
+ example: java.lang.NullPointerException
  - name: event
  title: Event
  group: 2

generated/csv/fields.csv

@@ -100,6 +100,7 @@ error.code,keyword,core,,1.2.0-dev
 error.id,keyword,core,,1.2.0-dev
 error.message,text,core,,1.2.0-dev
 error.stack_trace,keyword,extended,,1.2.0-dev
+error.type,keyword,extended,java.lang.NullPointerException,1.2.0-dev
 event.action,keyword,core,user-password-change,1.2.0-dev
 event.category,keyword,core,user-management,1.2.0-dev
 event.code,keyword,extended,4648,1.2.0-dev

generated/ecs/ecs_flat.yml

@@ -1112,9 +1112,19 @@ error.stack_trace:
  index: false
  level: extended
  name: stack_trace
- order: 3
+ order: 4
  short: The stack trace of this error in plain text.
  type: keyword
+error.type:
+ description: The type of the error, for example the class name of the exception.
+ example: java.lang.NullPointerException
+ flat_name: error.type
+ ignore_above: 1024
+ level: extended
+ name: type
+ order: 3
+ short: The type of the error, for example the class name of the exception.
+ type: keyword
 event.action:
  description: 'The action captured by the event.
 

generated/ecs/ecs_nested.yml

@@ -1304,9 +1304,19 @@ error:
  index: false
  level: extended
  name: stack_trace
- order: 3
+ order: 4
  short: The stack trace of this error in plain text.
  type: keyword
+ type:
+ description: The type of the error, for example the class name of the exception.
+ example: java.lang.NullPointerException
+ flat_name: error.type
+ ignore_above: 1024
+ level: extended
+ name: type
+ order: 3
+ short: The type of the error, for example the class name of the exception.
+ type: keyword
  group: 2
  name: error
  prefix: error.

generated/elasticsearch/6/template.json

@@ -498,6 +498,10 @@
  "ignore_above": 1024, 
  "index": false, 
  "type": "keyword"
+ }, 
+ "type": {
+ "ignore_above": 1024, 
+ "type": "keyword"
  }
  }
  }, 

generated/elasticsearch/7/template.json

@@ -497,6 +497,10 @@
  "ignore_above": 1024, 
  "index": false, 
  "type": "keyword"
+ }, 
+ "type": {
+ "ignore_above": 1024, 
+ "type": "keyword"
  }
  }
  }, 

generated/legacy/template.json

@@ -318,6 +318,10 @@
  "ignore_above": 1024,
  "index": false,
  "type": "keyword"
+ },
+ "type": {
+ "ignore_above": 1024,
+ "type": "keyword"
  }
  }
  },

schema.json

@@ -732,6 +732,16 @@
  "name": "error.stack_trace", 
  "required": false, 
  "type": "(not indexed)"
+ }, 
+ "error.type": {
+ "description": "The type of the error, for example the class name of the exception.", 
+ "example": "java.lang.NullPointerException", 
+ "footnote": "", 
+ "group": 2, 
+ "level": "extended", 
+ "name": "error.type", 
+ "required": false, 
+ "type": "keyword"
  }
  }, 
  "group": 2, 

schemas/error.yml

@@ -29,6 +29,13 @@
  description: >
  Error code describing the error.
 
+ - name: type
+ level: extended
+ type: keyword
+ example: java.lang.NullPointerException
+ description: >
+ The type of the error, for example the class name of the exception.
+
  - name: stack_trace
  level: extended
  type: keyword