Skip to content

Ensure parsed user_agents is indexed.  #1805

@simitt

Description

@simitt

Keep track of elastic/elasticsearch#37329.

If the changes get merged in time for 7.0 ensure we change the user_agent_parsed (introduced in #1783) to user_agent and that fields get indexed.

Otherwise ensure that in time for 7.0 we either

  • index the current user_agent_parsed fields or
  • overwrite ECS definitions from beats and move and index the information under user_agent with the downside that it is not ECS compliant.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions