Remove observer.product from decode_cef fields.yml (elastic#14089)

The field is now defined in ECS. Follow-up to elastic#14052.
jorgemarey · Dec 13, 2019 · 3afc53d · 3afc53d
1 parent 4280736
commit 3afc53d
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 15 deletions.
diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc
@@ -2656,15 +2656,6 @@ type: object
 
 --
 
-*`observer.product`*::
-+
---
-Product name.
-
-type: keyword
-
---
-
 *`source.service.name`*::
 +
 --

diff --git a/x-pack/filebeat/processors/decode_cef/_meta/fields.yml b/x-pack/filebeat/processors/decode_cef/_meta/fields.yml
@@ -54,11 +54,6 @@
           description: >
             Collection of key-value pairs carried in the CEF extension field.
 
-    - name: observer.product
-      type: keyword
-      description:
-        Product name.
-
     - name: source.service.name
       type: keyword
       description:

diff --git a/x-pack/filebeat/processors/decode_cef/fields.go b/x-pack/filebeat/processors/decode_cef/fields.go