ECS Core and ECS Extended
See original GitHub issueWe’ve discussed creating a separation between the most stable and well understood fields (ECS Core) and the more experimental ones (ECS Extended). This issue is meant to have a discussion on how we should do this, and track the subtasks.
- Write documentation explaining the difference between the two
- Assign each field to one of the two levels (#133)
- Add the appropriate markings in all of the
schema/*.yml
files
- Add the appropriate markings in all of the
- Modify the scripts to support this new metadata about each field
- Output Level instead of Phase in the csv
- Output Level in a new column in the HTML
- Later, only if needed
- Option to generate core only csv & template?
- … (comment below for any other suggestion)
Issue Analytics
- State:
- Created 5 years ago
- Reactions:1
- Comments:13 (13 by maintainers)
Top Results From Across the Web
Please explain difference between Core and Extended #219
ECS -Extended Fields: A general name given to additional ECS fields that are not the ECS-Core fields. ECS-Extended field names are specified ...
Read more >Guidelines and Best Practices | Elastic Common Schema ...
ECS Field Levelsedit. ECS defines "Core" and "Extended" fields. Core fields. Fields that are most common across all use cases are defined as...
Read more >ECS Overview and Architecture - Dell
Dell ECS is a software-defined, cloud-scale, object storage platform that delivers S3, Atmos, CAS, Swift, NFSv3, and HDFS storage services on a single,...
Read more >Amazon Elastic Container Service (Amazon ECS) Features
Amazon ECS provides you with a set of simple API actions to allow you to integrate and extend the service. The API actions...
Read more >Elastic Common Schema (ECS) Reference
The ECS schema serves best when you follow schema guidelines and best practices. ECS Field Levels. ECS defines "Core" and "Extended" fields. Core...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
I think we should for now only focus on Core and Extended. Everything that should go into App or Protocol should for now just go into Extended. This reduces the complexity for now and we can still introduce more layers later if needed.
I’m ok with the above visual approach. The main downside I see is that people coming to ECS will see core and extended directly together on their first visit, at the same time this could be a benefit too. We should just start with one version and then see how it evolves.