From 00760cc6441cb1a1d21102525ff48f306c57bbc0 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Mon, 17 Jun 2024 13:46:45 +0000 Subject: [PATCH] Remove the ecs section (#3989) (#4012) (cherry picked from commit 14a96138a1940d544f75681b8786cf8ebbaea4a7) Co-authored-by: Arianna Laudazzi <46651782+alaudazzi@users.noreply.github.com> --- docs/en/integrations/build-integration.asciidoc | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/docs/en/integrations/build-integration.asciidoc b/docs/en/integrations/build-integration.asciidoc index 2d29146fb6..f2caefddec 100644 --- a/docs/en/integrations/build-integration.asciidoc +++ b/docs/en/integrations/build-integration.asciidoc @@ -302,18 +302,6 @@ The `event.module` and `event.dataset` fields are defined with a fixed value spe - `event.dataset: apache.access` Field `@timestamp` is defined here as type `date`. -=== ecs.yml -This file specifies every Elastic Common Schema (ECS) field used by the integration that is not defined in the files `agent.yml` or `base-fields.yml` files. It uses `external: ecs` references. -For example: -+ -[source,yaml] ----- -- external: ecs - name: client.ip -- external: ecs - name: destination.domain ----- - === fields.yml Here we define fields that we need in our integration and are not found in the ECS. The example below defines field `apache.access.ssl.protocol` in the Apache integration.