<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Ecs on Samarthya</title><link>https://samarthya.me/tags/ecs/</link><description>Recent content in Ecs on Samarthya</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© Samarthya 2018-2026. All rights reserved.</copyright><lastBuildDate>Thu, 02 Apr 2020 00:00:00 +0000</lastBuildDate><atom:link href="https://samarthya.me/tags/ecs/index.xml" rel="self" type="application/rss+xml"/><item><title>ECS: Elastic common schema</title><link>https://samarthya.me/posts/ecs-elastic-common-schema/</link><pubDate>Thu, 02 Apr 2020 00:00:00 +0000</pubDate><guid>https://samarthya.me/posts/ecs-elastic-common-schema/</guid><description>&lt;p&gt;Open specification for document fields for data ingested in Elasticsearch. It brings uniformity to certain common fields that are used across data sources.&lt;/p&gt;&#10;&lt;p&gt;ECS defines two field levels&lt;/p&gt;&#10;&lt;ol&gt;&#10;&lt;li&gt;Core fields: Represent the fields that are most common across all use cases.&lt;/li&gt;&#10;&lt;li&gt;Extended fields: That are not part of the core and specific to cases.&lt;/li&gt;&#10;&lt;/ol&gt;&#10;&#10;&lt;h2 class="relative group"&gt;Field sets&#10; &lt;div id="field-sets" class="anchor"&gt;&lt;/div&gt;&#10; &#10; &lt;span&#10; class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"&gt;&#10; &lt;a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#field-sets" aria-label="Anchor"&gt;#&lt;/a&gt;&#10; &lt;/span&gt;&#10; &#10;&lt;/h2&gt;&#10;&lt;p&gt;Field sets are multiple groups of related fields defined by ECS. More information &lt;a href="https://www.elastic.co/guide/en/ecs/current/ecs-field-reference.html" target="_blank" rel="noreferrer"&gt;here&lt;/a&gt;.&lt;/p&gt;</description></item></channel></rss>