Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 84e668c

Browse files
adriansradriansr
authored
[breaking] Make default_field: false the default for all fields (#28596)
Changes the default value of the default_field flag in fields definitions to false. This means that only fields that are explicitly marked with default_fields: true (or their subfields) will be added to the index template's setting.index.query.default_field list. After this PR, all fields are excluded from default_field, except: - Selected fields from ECS. The ECS team maintains the list of fields that are included. - Fields for processors. - Fields for Filebeat inputs.
1 parent d2e3b99 commit 84e668c

162 files changed

Lines changed: 87 additions & 250 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎CHANGELOG.next.asciidoc‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
2626
- Remove `auto` from the available options of `setup.ilm.enabled` and set the default value to `true`. {pull}28671[28671]
2727
- add_process_metadata processor: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620]
2828
- add_docker_metadata processor: Replace usage of deprecated `process.ppid` field with `process.parent.pid`. {pull}28620[28620]
29+
- Index template's default_fields setting is only populated with ECS fields. {pull}28596[28596] {issue}28215[28215]
2930

3031
*Auditbeat*
3132

‎auditbeat/include/fields.go‎

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎filebeat/include/fields.go‎

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎filebeat/module/pensando/dfw/_meta/fields.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
- name: dfw
22
type: group
33
release: beta
4-
default_field: false
54
description: >
65
Fields for Pensando DFW
76
fields:

‎filebeat/module/pensando/fields.go‎

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎heartbeat/_meta/fields.common.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -478,7 +478,6 @@
478478
ignore_above: 1024
479479
description: Version of x509 format.
480480
example: 3
481-
default_field: false
482481

483482
- key: icmp
484483
title: "ICMP"

‎heartbeat/include/fields.go‎

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎journalbeat/include/fields.go‎

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎libbeat/autodiscover/providers/jolokia/_meta/fields.yml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,30 +4,37 @@
44
Metadata from Jolokia Discovery added by the jolokia provider.
55
fields:
66
- name: jolokia.agent.version
7+
default_field: true
78
type: keyword
89
description: >
910
Version number of jolokia agent.
1011
- name: jolokia.agent.id
12+
default_field: true
1113
type: keyword
1214
description: >
1315
Each agent has a unique id which can be either provided during startup of the agent in form of a configuration parameter or being autodetected. If autodected, the id has several parts: The IP, the process id, hashcode of the agent and its type.
1416
- name: jolokia.server.product
17+
default_field: true
1518
type: keyword
1619
description: >
1720
The container product if detected.
1821
- name: jolokia.server.version
22+
default_field: true
1923
type: keyword
2024
description: >
2125
The container's version (if detected).
2226
- name: jolokia.server.vendor
27+
default_field: true
2328
type: keyword
2429
description: >
2530
The vendor of the container the agent is running in.
2631
- name: jolokia.url
32+
default_field: true
2733
type: keyword
2834
description: >
2935
The URL how this agent can be contacted.
3036
- name: jolokia.secured
37+
default_field: true
3138
type: boolean
3239
description: >
3340
Whether the agent was configured for authentication or not.

‎libbeat/processors/add_cloud_metadata/_meta/fields.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,42 +5,50 @@
55
fields:
66

77
- name: cloud.image.id
8+
default_field: true
89
example: ami-abcd1234
910
description: >
1011
Image ID for the cloud instance.
1112
1213
# Alias for old fields
1314
- name: meta.cloud.provider
15+
default_field: true
1416
type: alias
1517
path: cloud.provider
1618
migration: true
1719

1820
- name: meta.cloud.instance_id
21+
default_field: true
1922
type: alias
2023
path: cloud.instance.id
2124
migration: true
2225

2326
- name: meta.cloud.instance_name
27+
default_field: true
2428
type: alias
2529
path: cloud.instance.name
2630
migration: true
2731

2832
- name: meta.cloud.machine_type
33+
default_field: true
2934
type: alias
3035
path: cloud.machine.type
3136
migration: true
3237

3338
- name: meta.cloud.availability_zone
39+
default_field: true
3440
type: alias
3541
path: cloud.availability_zone
3642
migration: true
3743

3844
- name: meta.cloud.project_id
45+
default_field: true
3946
type: alias
4047
path: cloud.project.id
4148
migration: true
4249

4350
- name: meta.cloud.region
51+
default_field: true
4452
type: alias
4553
path: cloud.region
4654
migration: true

0 commit comments

Comments
 (0)