From 2620dc10ff8e59c9810890e6a73f50bda313d3ab Mon Sep 17 00:00:00 2001 From: Mike Birnstiehl Date: Wed, 9 Apr 2025 14:39:05 -0500 Subject: [PATCH 1/4] consolidate field reference pages --- .../fields-and-object-schemas.md | 351 +++++++++++++++- .../metrics-app-fields.md | 391 ------------------ reference/observability/index.md | 1 - .../serverless/infrastructure-app-fields.md | 115 ------ reference/observability/toc.yml | 5 +- 5 files changed, 351 insertions(+), 512 deletions(-) delete mode 100644 reference/observability/fields-and-object-schemas/metrics-app-fields.md delete mode 100644 reference/observability/serverless/infrastructure-app-fields.md diff --git a/reference/observability/fields-and-object-schemas.md b/reference/observability/fields-and-object-schemas.md index 0979952696..e37b88df33 100644 --- a/reference/observability/fields-and-object-schemas.md +++ b/reference/observability/fields-and-object-schemas.md @@ -1,6 +1,10 @@ --- +applies_to: + stack: all + serverless: all mapped_pages: - https://www.elastic.co/guide/en/observability/current/fields-reference.html + - https://www.elastic.co/guide/en/observability/current/metrics-app-fields.html --- # Fields and object schemas [fields-reference] @@ -11,7 +15,352 @@ ECS is an open source specification that defines a standard set of fields to use Beat modules (for example, [{{filebeat}} modules](beats://reference/filebeat/filebeat-modules.md)) are ECS-compliant, so manual field mapping is not required, and all data is populated automatically in the Infrastructure app. If you cannot use {{beats}}, map your data to [ECS fields](ecs://reference/ecs-converting.md)). You can also try using the experimental [ECS Mapper](https://github.com/elastic/ecs-mapper) tool. -This reference covers [{{infrastructure-app}} fields](/reference/observability/fields-and-object-schemas/metrics-app-fields.md). +This reference covers {{infrastructure-app}} fields. +## Infrastructure app fields [metrics-app-fields] +This section lists the required fields the {{infrastructure-app}} uses to display data. Please note that some of the fields listed are not [ECS fields](ecs://reference/index.md#_what_is_ecs). +### Additional field details [_additional_field_details] + +The `event.dataset` field is required to display data properly in some views. This field is a combination of `metricset.module`, which is the {{metricbeat}} module name, and `metricset.name`, which is the metricset name. + +To determine each metric’s optimal time interval, all charts use `metricset.period`. If `metricset.period` is not available, then it falls back to 1 minute intervals. + +### Base fields [base-fields] + +The `base` field set contains all fields which are on the top level. These fields are common across all types of events. + +`@timestamp` +: Date/time when the event originated. + + This is the date/time extracted from the event, typically representing when the source generated the event. If the event source has no original timestamp, this value is typically populated by the first time the pipeline received the event. Required field for all events. + + type: date + + required: True + + ECS field: True + + example: `May 27, 2020 @ 15:22:27.982` + +`message` +: For log events the message field contains the log message, optimized for viewing in a log viewer. + + For structured logs without an original message field, other fields can be concatenated to form a human-readable summary of the event. + + If multiple messages exist, they can be combined into one message. + + type: text + + required: True + + ECS field: True + + example: `Hello World` + +### Hosts fields [host-fields] + +These fields must be mapped to display host data in the {{infrastructure-app}}. + +`host.name` +: Name of the host. + + It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. + + type: keyword + + required: True + + ECS field: True + + example: `MacBook-Elastic.local` + +`host.ip` +: IP of the host that records the event. + + type: `ip` + + required: True + + ECS field: True + +### Docker container fields [docker-fields] + +These fields must be mapped to display Docker container data in the {{infrastructure-app}}. + +`container.id` +: Unique container id. + + type: keyword + + required: True + + ECS field: True + + example: `data` + +`container.name` +: Container name. + + type: keyword + + required: True + + ECS field: True + +`container.ip_address` +: IP of the container. + + type: `ip` + + required: True + + ECS field: False + +### Kubernetes pod fields [kubernetes-fields] + +These fields must be mapped to display Kubernetes pod data in the {{infrastructure-app}}. + +`kubernetes.pod.uid` +: Kubernetes Pod UID. + + type: keyword + + required: True + + ECS field: False + + example: `8454328b-673d-11ea-7d80-21010a840123` + +`kubernetes.pod.name` +: Kubernetes pod name. + + type: keyword + + required: True + + ECS field: False + + example: `nginx-demo` + +`kubernetes.pod.ip` +: IP of the Kubernetes pod. + + type: keyword + + required: True + + ECS field: False + +### AWS EC2 instance fields [aws-ec2-fields] + +These fields must be mapped to display EC2 instance data in the {{infrastructure-app}}. + +`cloud.instance.id` +: Instance ID of the host machine. + + type: keyword + + required: True + + ECS field: True + + example: `i-1234567890abcdef0` + +`cloud.instance.name` +: Instance name of the host machine. + + type: keyword + + required: True + + ECS field: True + +`aws.ec2.instance.public.ip` +: Instance public IP of the host machine. + + type: keyword + + required: True + + ECS field: False + +### AWS S3 bucket fields [aws-s3-fields] + +These fields must be mapped to display S3 bucket data in the {{infrastructure-app}}. + +`aws.s3.bucket.name` +: The name or ID of the AWS S3 bucket. + + type: keyword + + required: True + + ECS field: False + +### AWS SQS queue fields [aws-sqs-fields] + +These fields must be mapped to display SQS queue data in the {{infrastructure-app}}. + +`aws.sqs.queue.name` +: The name or ID of the AWS SQS queue. + + type: keyword + + required: True + + ECS field: False + +### AWS RDS database fields [aws-rds-fields] + +These fields must be mapped to display RDS database data in the {{infrastructure-app}}. + +`aws.rds.db_instance.arn` +: Amazon Resource Name (ARN) for each RDS. + + type: keyword + + required: True + + ECS field: False + +`aws.rds.db_instance.identifier` +: Contains a user-supplied database identifier. This identifier is the unique key that identifies a DB instance. + + type: keyword + + required: True + + ECS field: False + +### Additional grouping fields [group-inventory-fields] + +Depending on which entity you select in the **Infrastructure inventory** view, these additional fields can be mapped to group entities by. + +`cloud.availability_zone` +: Availability zone in which this host is running. + + type: keyword + + required: True + + ECS field: True + + example: `us-east-1c` + +`cloud.machine.type` +: Machine type of the host machine. + + type: keyword + + required: True + + ECS field: True + + example: `t2.medium` + +`cloud.region` +: Region in which this host is running. + + type: keyword + + required: True + + ECS field: True + + example: `us-east-1` + +`cloud.instance.id` +: Instance ID of the host machine. + + type: keyword + + required: True + + ECS field: True + + example: `i-1234567890abcdef0` + +`cloud.provider` +: Name of the cloud provider. Example values are `aws`, `azure`, `gcp`, or `digitalocean`. + + type: keyword + + required: True + + ECS field: True + + example: `aws` + +`cloud.instance.name` +: Instance name of the host machine. + + type: keyword + + required: True + + ECS field: True + +`cloud.project.id` +: Name of the project in Google Cloud. + + type: keyword + + required: True + + ECS field: False + +`service.type` +: The type of the service data is collected from. + + The type can be used to group and correlate logs and metrics from one service type. + + Example: If metrics are collected from {{es}}, service.type would be `elasticsearch`. + + type: keyword + + required: True + + ECS field: False + + example: `elasticsearch` + +`host.hostname` +: Name of the host. + + It normally contains what the `hostname` command returns on the host machine. + + type: keyword + + required: True, if you want to use the {{ml-features}}. + + ECS field: True + + example: `Elastic.local` + +`host.os.name` +: Operating system name, without the version. + + Multi-fields: + + * os.name.text (type: text) + + type: keyword + + required: True + + ECS field: True + + example: `Mac OS X` + +`host.os.kernel` +: Operating system kernel version as a raw string. + + type: keyword + + required: True + + ECS field: True + + example: `4.4.0-112-generic` \ No newline at end of file diff --git a/reference/observability/fields-and-object-schemas/metrics-app-fields.md b/reference/observability/fields-and-object-schemas/metrics-app-fields.md deleted file mode 100644 index 1082d9fc7f..0000000000 --- a/reference/observability/fields-and-object-schemas/metrics-app-fields.md +++ /dev/null @@ -1,391 +0,0 @@ ---- -mapped_pages: - - https://www.elastic.co/guide/en/observability/current/metrics-app-fields.html ---- - -# Infrastructure app fields [metrics-app-fields] - -This section lists the required fields the {{infrastructure-app}} uses to display data. Please note that some of the fields listed are not [ECS fields](ecs://reference/index.md#_what_is_ecs). - - -## Additional field details [_additional_field_details] - -The `event.dataset` field is required to display data properly in some views. This field is a combination of `metricset.module`, which is the {{metricbeat}} module name, and `metricset.name`, which is the metricset name. - -To determine each metric’s optimal time interval, all charts use `metricset.period`. If `metricset.period` is not available, then it falls back to 1 minute intervals. - - -## Base fields [base-fields] - -The `base` field set contains all fields which are on the top level. These fields are common across all types of events. - -`@timestamp` -: Date/time when the event originated. - - This is the date/time extracted from the event, typically representing when the source generated the event. If the event source has no original timestamp, this value is typically populated by the first time the pipeline received the event. Required field for all events. - - type: date - - required: True - - ECS field: True - - example: `May 27, 2020 @ 15:22:27.982` - - -`message` -: For log events the message field contains the log message, optimized for viewing in a log viewer. - - For structured logs without an original message field, other fields can be concatenated to form a human-readable summary of the event. - - If multiple messages exist, they can be combined into one message. - - type: text - - required: True - - ECS field: True - - example: `Hello World` - - - -## Hosts fields [host-fields] - -These fields must be mapped to display host data in the {{infrastructure-app}}. - -`host.name` -: Name of the host. - - It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. - - type: keyword - - required: True - - ECS field: True - - example: `MacBook-Elastic.local` - - -`host.ip` -: IP of the host that records the event. - - type: `ip` - - required: True - - ECS field: True - - - -## Docker container fields [docker-fields] - -These fields must be mapped to display Docker container data in the {{infrastructure-app}}. - -`container.id` -: Unique container id. - - type: keyword - - required: True - - ECS field: True - - example: `data` - - -`container.name` -: Container name. - - type: keyword - - required: True - - ECS field: True - - -`container.ip_address` -: IP of the container. - - type: `ip` - - required: True - - ECS field: False - - - -## Kubernetes pod fields [kubernetes-fields] - -These fields must be mapped to display Kubernetes pod data in the {{infrastructure-app}}. - -`kubernetes.pod.uid` -: Kubernetes Pod UID. - - type: keyword - - required: True - - ECS field: False - - example: `8454328b-673d-11ea-7d80-21010a840123` - - -`kubernetes.pod.name` -: Kubernetes pod name. - - type: keyword - - required: True - - ECS field: False - - example: `nginx-demo` - - -`kubernetes.pod.ip` -: IP of the Kubernetes pod. - - type: keyword - - required: True - - ECS field: False - - - -## AWS EC2 instance fields [aws-ec2-fields] - -These fields must be mapped to display EC2 instance data in the {{infrastructure-app}}. - -`cloud.instance.id` -: Instance ID of the host machine. - - type: keyword - - required: True - - ECS field: True - - example: `i-1234567890abcdef0` - - -`cloud.instance.name` -: Instance name of the host machine. - - type: keyword - - required: True - - ECS field: True - - -`aws.ec2.instance.public.ip` -: Instance public IP of the host machine. - - type: keyword - - required: True - - ECS field: False - - - -## AWS S3 bucket fields [aws-s3-fields] - -These fields must be mapped to display S3 bucket data in the {{infrastructure-app}}. - -`aws.s3.bucket.name` -: The name or ID of the AWS S3 bucket. - - type: keyword - - required: True - - ECS field: False - - - -## AWS SQS queue fields [aws-sqs-fields] - -These fields must be mapped to display SQS queue data in the {{infrastructure-app}}. - -`aws.sqs.queue.name` -: The name or ID of the AWS SQS queue. - - type: keyword - - required: True - - ECS field: False - - - -## AWS RDS database fields [aws-rds-fields] - -These fields must be mapped to display RDS database data in the {{infrastructure-app}}. - -`aws.rds.db_instance.arn` -: Amazon Resource Name (ARN) for each RDS. - - type: keyword - - required: True - - ECS field: False - - -`aws.rds.db_instance.identifier` -: Contains a user-supplied database identifier. This identifier is the unique key that identifies a DB instance. - - type: keyword - - required: True - - ECS field: False - - - -## Additional grouping fields [group-inventory-fields] - -Depending on which entity you select in the **Infrastructure inventory** view, these additional fields can be mapped to group entities by. - -`cloud.availability_zone` -: Availability zone in which this host is running. - - type: keyword - - required: True - - ECS field: True - - example: `us-east-1c` - - -`cloud.machine.type` -: Machine type of the host machine. - - type: keyword - - required: True - - ECS field: True - - example: `t2.medium` - - -`cloud.region` -: Region in which this host is running. - - type: keyword - - required: True - - ECS field: True - - example: `us-east-1` - - -`cloud.instance.id` -: Instance ID of the host machine. - - type: keyword - - required: True - - ECS field: True - - example: `i-1234567890abcdef0` - - -`cloud.provider` -: Name of the cloud provider. Example values are `aws`, `azure`, `gcp`, or `digitalocean`. - - type: keyword - - required: True - - ECS field: True - - example: `aws` - - -`cloud.instance.name` -: Instance name of the host machine. - - type: keyword - - required: True - - ECS field: True - - -`cloud.project.id` -: Name of the project in Google Cloud. - - type: keyword - - required: True - - ECS field: False - - -`service.type` -: The type of the service data is collected from. - - The type can be used to group and correlate logs and metrics from one service type. - - Example: If metrics are collected from {{es}}, service.type would be `elasticsearch`. - - type: keyword - - required: True - - ECS field: False - - example: `elasticsearch` - - -`host.hostname` -: Name of the host. - - It normally contains what the `hostname` command returns on the host machine. - - type: keyword - - required: True, if you want to use the {{ml-features}}. - - ECS field: True - - example: `Elastic.local` - - -`host.os.name` -: Operating system name, without the version. - - Multi-fields: - - * os.name.text (type: text) - - type: keyword - - required: True - - ECS field: True - - example: `Mac OS X` - - -`host.os.kernel` -: Operating system kernel version as a raw string. - - type: keyword - - required: True - - ECS field: True - - example: `4.4.0-112-generic` - - diff --git a/reference/observability/index.md b/reference/observability/index.md index f78173e66a..f821526ece 100644 --- a/reference/observability/index.md +++ b/reference/observability/index.md @@ -13,7 +13,6 @@ mapped_pages: This section contains reference information for Elastic Observability features, including: * Fields reference - * Logs Discover fields * Infrastructure app fields * Elastic Entity Model diff --git a/reference/observability/serverless/infrastructure-app-fields.md b/reference/observability/serverless/infrastructure-app-fields.md deleted file mode 100644 index f1acfcd60b..0000000000 --- a/reference/observability/serverless/infrastructure-app-fields.md +++ /dev/null @@ -1,115 +0,0 @@ ---- -mapped_pages: - - https://www.elastic.co/guide/en/serverless/current/observability-infrastructure-monitoring-required-fields.html ---- - -# Infrastructure app fields [observability-infrastructure-monitoring-required-fields] - -This section lists the fields the Infrastructure UI uses to display data. Please note that some of the fields listed here are not [ECS fields](ecs://reference/index.md#_what_is_ecs). - - -## Additional field details [observability-infrastructure-monitoring-required-fields-additional-field-details] - -The `event.dataset` field is required to display data properly in some views. This field is a combination of `metricset.module`, which is the {{metricbeat}} module name, and `metricset.name`, which is the metricset name. - -To determine each metric’s optimal time interval, all charts use `metricset.period`. If `metricset.period` is not available, then it falls back to 1 minute intervals. - - -## Base fields [base-fields] - -The `base` field set contains all fields which are on the top level. These fields are common across all types of events. - -| Field | Description | Type | -| --- | --- | --- | -| `@timestamp` | Date/time when the event originated.

This is the date/time extracted from the event, typically representing when the source generated the event. If the event source has no original timestamp, this value is typically populated by the first time the pipeline received the event. Required field for all events.

Example: `May 27, 2020 @ 15:22:27.982`
| date | -| `message` | For log events the message field contains the log message, optimized for viewing in a log viewer.

For structured logs without an original message field, other fields can be concatenated to form a human-readable summary of the event.

If multiple messages exist, they can be combined into one message.

Example: `Hello World`
| text | - - -## Hosts fields [host-fields] - -These fields must be mapped to display host data in the {{infrastructure-app}}. - -| Field | Description | Type | -| --- | --- | --- | -| `host.name` | Name of the host.

It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use.

Example: `MacBook-Elastic.local`
| keyword | -| `host.ip` | IP of the host that records the event. | ip | - - -## Docker container fields [docker-fields] - -These fields must be mapped to display Docker container data in the {{infrastructure-app}}. - -| Field | Description | Type | -| --- | --- | --- | -| `container.id` | Unique container id.

Example: `data`
| keyword | -| `container.name` | Container name. | keyword | -| `container.ip_address` | IP of the container.

*Not an ECS field*
| ip | - - -## Kubernetes pod fields [kubernetes-fields] - -These fields must be mapped to display Kubernetes pod data in the {{infrastructure-app}}. - -| Field | Description | Type | -| --- | --- | --- | -| `kubernetes.pod.uid` | Kubernetes Pod UID.

Example: `8454328b-673d-11ea-7d80-21010a840123`

*Not an ECS field*
| keyword | -| `kubernetes.pod.name` | Kubernetes pod name.

Example: `nginx-demo`

*Not an ECS field*
| keyword | -| `kubernetes.pod.ip` | IP of the Kubernetes pod.

*Not an ECS field*
| keyword | - - -## AWS EC2 instance fields [aws-ec2-fields] - -These fields must be mapped to display EC2 instance data in the {{infrastructure-app}}. - -| Field | Description | Type | -| --- | --- | --- | -| `cloud.instance.id` | Instance ID of the host machine.

Example: `i-1234567890abcdef0`
| keyword | -| `cloud.instance.name` | Instance name of the host machine. | keyword | -| `aws.ec2.instance.public.ip` | Instance public IP of the host machine.

*Not an ECS field*
| keyword | - - -## AWS S3 bucket fields [aws-s3-fields] - -These fields must be mapped to display S3 bucket data in the {{infrastructure-app}}. - -| Field | Description | Type | -| --- | --- | --- | -| `aws.s3.bucket.name` | The name or ID of the AWS S3 bucket.

*Not an ECS field*
| keyword | - - -## AWS SQS queue fields [aws-sqs-fields] - -These fields must be mapped to display SQS queue data in the {{infrastructure-app}}. - -| Field | Description | Type | -| --- | --- | --- | -| `aws.sqs.queue.name` | The name or ID of the AWS SQS queue.

*Not an ECS field*
| keyword | - - -## AWS RDS database fields [aws-rds-fields] - -These fields must be mapped to display RDS database data in the {{infrastructure-app}}. - -| Field | Description | Type | -| --- | --- | --- | -| `aws.rds.db_instance.arn` | Amazon Resource Name (ARN) for each RDS.

*Not an ECS field*
| keyword | -| `aws.rds.db_instance.identifier` | Contains a user-supplied database identifier. This identifier is the unique key that identifies a DB instance.

*Not an ECS field*
| keyword | - - -## Additional grouping fields [group-inventory-fields] - -Depending on which entity you select in the **Infrastructure inventory** view, these additional fields can be mapped to group entities by. - -| Field | Description | Type | -| --- | --- | --- | -| `cloud.availability_zone` | Availability zone in which this host is running.

Example: `us-east-1c`
| keyword | -| `cloud.machine.type` | Machine type of the host machine.

Example: `t2.medium`
| keyword | -| `cloud.region` | Region in which this host is running.

Example: `us-east-1`
| keyword | -| `cloud.instance.id` | Instance ID of the host machine.

Example: `i-1234567890abcdef0`
| keyword | -| `cloud.provider` | Name of the cloud provider. Example values are `aws`, `azure`, `gcp`, or `digitalocean`.

Example: `aws`
| keyword | -| `cloud.instance.name` | Instance name of the host machine. | keyword | -| `cloud.project.id` | Name of the project in Google Cloud.

*Not an ECS field*
| keyword | -| `service.type` | The type of service data is collected from.

The type can be used to group and correlate logs and metrics from one service type.

For example, the service type for metrics collected from {{es}} is `elasticsearch`.

Example: `elasticsearch`

*Not an ECS field*
| keyword | -| `host.hostname` | Name of the host. This field is required if you want to use {{ml-features}}

It normally contains what the `hostname` command returns on the host machine.

Example: `Elastic.local`
| keyword | -| `host.os.name` | Operating system name, without the version.

Multi-fields:

os.name.text (type: text)

Example: `Mac OS X`
| keyword | -| `host.os.kernel` | Operating system kernel version as a raw string.

Example: `4.4.0-112-generic`
| keyword | diff --git a/reference/observability/toc.yml b/reference/observability/toc.yml index f93a5019c0..f1d1d7a63f 100644 --- a/reference/observability/toc.yml +++ b/reference/observability/toc.yml @@ -1,7 +1,4 @@ toc: - file: index.md - file: fields-and-object-schemas.md - children: - - file: fields-and-object-schemas/metrics-app-fields.md - - file: elastic-entity-model.md - - file: serverless/infrastructure-app-fields.md \ No newline at end of file + - file: elastic-entity-model.md \ No newline at end of file From 73608bb364286d230146938a2fb66e25d3142173 Mon Sep 17 00:00:00 2001 From: Mike Birnstiehl Date: Wed, 9 Apr 2025 14:51:50 -0500 Subject: [PATCH 2/4] add redirect --- redirects.yml | 3 ++- reference/observability/index.md | 6 +----- 2 files changed, 3 insertions(+), 6 deletions(-) diff --git a/redirects.yml b/redirects.yml index d2deca4129..20613969ce 100644 --- a/redirects.yml +++ b/redirects.yml @@ -4,4 +4,5 @@ redirects: 'deploy-manage/security/security-certificates-keys.md': '!deploy-manage/security/self-auto-setup.md' 'deploy-manage/security/ece-traffic-filtering-through-the-api.md': 'deploy-manage/security/ec-traffic-filtering-through-the-api.md' 'deploy-manage/security/install-stack-demo-secure.md': '!deploy-manage/security/self-setup.md' - 'reference/observability/fields-and-object-schemas/logs-app-fields.md': '!reference/observability/fields-and-object-schemas.md' \ No newline at end of file + 'reference/observability/fields-and-object-schemas/logs-app-fields.md': '!reference/observability/fields-and-object-schemas.md' + 'reference/observability/fields-and-object-schemas/metrics-app-fields.md': '!reference/observability/fields-and-object-schemas.md' \ No newline at end of file diff --git a/reference/observability/index.md b/reference/observability/index.md index f821526ece..fddeaff38d 100644 --- a/reference/observability/index.md +++ b/reference/observability/index.md @@ -10,11 +10,7 @@ mapped_pages: % TO-DO: Add links to "What is Elastic Observability?"% -This section contains reference information for Elastic Observability features, including: - -* Fields reference - * Infrastructure app fields -* Elastic Entity Model +This section contains field reference information Infrastructure app fields. You can use these APIs to interface with Elastic Observability features: From fd10033bb2e9a48d52a711d9f2f5bba39643d51f Mon Sep 17 00:00:00 2001 From: Mike Birnstiehl Date: Wed, 9 Apr 2025 15:00:48 -0500 Subject: [PATCH 3/4] fix links --- .../data-analysis/observability/observability-aws-metrics.md | 2 +- .../observability/observability-kubernetes-pod-metrics.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/reference/data-analysis/observability/observability-aws-metrics.md b/reference/data-analysis/observability/observability-aws-metrics.md index 21cedb95f3..ffbfdb6a5b 100644 --- a/reference/data-analysis/observability/observability-aws-metrics.md +++ b/reference/data-analysis/observability/observability-aws-metrics.md @@ -64,4 +64,4 @@ To analyze RDS database metrics, you can select view filters based on the follow | **Active Transactions** | Average of `aws.rds.transactions.active`. | | **Latency** | Average of `aws.rds.latency.dml`. | -For information about the fields used by the Infrastructure UI to display AWS services metrics, see the [Infrastructure app fields](/reference/observability/serverless/infrastructure-app-fields.md). +For information about the fields used by the Infrastructure UI to display AWS services metrics, see the [Infrastructure app fields](/reference/observability/fields-and-object-schemas.md). diff --git a/reference/data-analysis/observability/observability-kubernetes-pod-metrics.md b/reference/data-analysis/observability/observability-kubernetes-pod-metrics.md index 621a3e9695..ee9edc7dd8 100644 --- a/reference/data-analysis/observability/observability-kubernetes-pod-metrics.md +++ b/reference/data-analysis/observability/observability-kubernetes-pod-metrics.md @@ -15,4 +15,4 @@ To analyze Kubernetes pod metrics, you can select view filters based on the foll | **Inbound Traffic** | Derivative of the maximum of `kubernetes.pod.network.rx.bytes` scaled to a 1 second rate. | | **Outbound Traffic** | Derivative of the maximum of `kubernetes.pod.network.tx.bytes` scaled to a 1 second rate. | -For information about the fields used by the Infrastructure UI to display Kubernetes pod metrics, see the [Infrastructure app fields](/reference/observability/serverless/infrastructure-app-fields.md). +For information about the fields used by the Infrastructure UI to display Kubernetes pod metrics, see the [Infrastructure app fields](/reference/observability/fields-and-object-schemas.md). From fa4309e3a70eca431279c14e449b1cdd25a85aa6 Mon Sep 17 00:00:00 2001 From: Mike Birnstiehl <114418652+mdbirnstiehl@users.noreply.github.com> Date: Thu, 10 Apr 2025 08:49:59 -0500 Subject: [PATCH 4/4] Update reference/observability/fields-and-object-schemas.md Co-authored-by: Colleen McGinnis --- reference/observability/fields-and-object-schemas.md | 1 + 1 file changed, 1 insertion(+) diff --git a/reference/observability/fields-and-object-schemas.md b/reference/observability/fields-and-object-schemas.md index e37b88df33..1391f63c89 100644 --- a/reference/observability/fields-and-object-schemas.md +++ b/reference/observability/fields-and-object-schemas.md @@ -5,6 +5,7 @@ applies_to: mapped_pages: - https://www.elastic.co/guide/en/observability/current/fields-reference.html - https://www.elastic.co/guide/en/observability/current/metrics-app-fields.html + - https://www.elastic.co/guide/en/serverless/current/observability-infrastructure-monitoring-required-fields.html --- # Fields and object schemas [fields-reference]