resolves #98634 This adds a new object property to the event log kibana object named task, with two properties to track the time the task was scheduled to run, and the delay between when it was supposed to run and when it actually started. This task property is only added to the appropriate events. task: schema.maybe( schema.object({ scheduled: ecsDate(), schedule_delay: ecsNumber(), }) ), Note that these changes were previously merged to master in https://github.com/elastic/kibana/pull/102252 which had to be reverted - this PR contains the same commits, plus some additional ones to resolve the tests that were broken during the bad merge. |
||
---|---|---|
.. | ||
mappings.json | ||
README.md | ||
schemas.ts |
Generating event schema
The files in this directory were generated by manually running the script
../scripts/create-schemas.js
from the root directory of the repository.
These files should not be edited by hand.
Please follow the following steps:
-
Clone the ECS repo locally so that it resides along side your kibana repo, and checkout the ECS version you wish to support (for example, the
1.8
branch, for version 1.8). -
In the
x-pack/plugins/event_log/scripts/mappings.js
file you'll want to make the following changes:- Update
EcsCustomPropertyMappings
to include the mapping of the custom fields you wish to add. - Update
EcsPropertiesToGenerate
to include the fields in the generatedmappings.json
. - Make sure to list all array fields in
EcsEventLogMultiValuedProperties
.
- Update
-
Cd to the
kibana
root folder and run:node ./x-pack/plugins/event_log/scripts/create_schemas.js