This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« DNS Fields ELF Header Fields »
Elastic Docs ›Elastic Common Schema (ECS) Reference [master] ›ECS Field Reference

ECS Fields

edit

ECS Fields

edit

Meta-information specific to ECS.

ECS Field Details

edit
Field Description Level

ecs.version

ECS version this event conforms to. ecs.version is a required field and must exist in all events.

When querying across multiple indices — which may conform to slightly different ECS versions — this field lets integrations adjust to the schema version of the events.

type: keyword

example: 1.0.0

core
« DNS Fields ELF Header Fields »