Additional ECS information

  • Questions and Answers
  • Contributing to ECS
  • Generated Artifacts
Previous
Field & Attributes Alignment
Next
Questions and answers
  • View as Markdown
  • Edit this page
  • Elastic Common Schema (ECS)
  • Elastic Common Schema (ECS)
    • Using ECS
      • Getting started
      • Guidelines and best practices
        • Conventions
        • Implementation patterns
        • Mapping network events
      • Design principles
      • Custom fields
    • ECS field reference
      • Base fields
      • Agent fields
      • Autonomous System fields
      • Client fields
      • Cloud fields
        • Cloud fields usage and examples
      • Code Signature fields
      • Container fields
      • Data Stream fields
      • Destination fields
      • Device fields
      • DLL fields
      • DNS fields
      • ECS fields
      • ELF Header fields
      • Email fields
      • Entity fields
        • entity.type
      • Entity Reference fields
      • Error fields
      • Event fields
      • FaaS fields
      • File fields
      • Gen AI fields
      • Geo fields
      • Group fields
      • Hash fields
      • Host fields
      • HTTP fields
      • Interface fields
      • Log fields
      • Mach-O Header fields
      • Network fields
      • Observer fields
      • Orchestrator fields
      • Organization fields
      • Operating System fields
      • Package fields
      • PE Header fields
      • Process fields
      • Registry fields
      • Related fields
      • Risk information fields
      • Rule fields
      • Server fields
      • Service fields
        • Service fields usage and examples
      • Source fields
      • Threat fields
        • Threat fields usage and examples
      • TLS fields
      • Tracing fields
      • URL fields
      • User fields
        • User fields usage and examples
      • User agent fields
      • VLAN fields
      • Volume fields
      • Vulnerability fields
        • vulnerability.status
      • x509 Certificate fields
    • ECS categorization fields
      • event.kind
      • event.category
      • event.type
      • event.outcome
      • Using the categorization fields
    • Migrating to ECS
      • Products and solutions that support ECS
      • Map custom data to ECS
    • ECS & OpenTelemetry
      • OTel Alignment Overview
      • Field & Attributes Alignment
    • Additional information
      • Questions and answers
      • Contributing to ECS
      • Generated artifacts
  • Elastic Common Schema (ECS)
    • Known issues
    • Breaking changes
    • Deprecations
Elastic logo

© 2026 Elasticsearch B.V. All Rights Reserved.

  • Terms of Use
  • Privacy