Skip to content

Fix description of syslog.severity.name and syslog.severity.code #2290

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Fix description of syslog.severity.name and syslog.severity.code #2290

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
e62aa44
docs: fixes loglsyslog.severity.name description
fgierlinger Oct 6, 2023
d6213e7
add artifacts
fgierlinger Oct 6, 2023
47b6906
docs: update CHANGELOG
fgierlinger Oct 6, 2023
751eb5a
docs: move changelog to bugfix category
fgierlinger Oct 18, 2023
4d1ee51
Merge branch 'main' into patch-1
fgierlinger Oct 18, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGELOG.next.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,8 @@ Thanks, you're awesome :-) -->

#### Improvements

Updated description for 'syslog.severity.name' to clarify that the type is text-based. #2290

#### Deprecated

### Tooling and Artifact Changes
Expand All @@ -30,6 +32,8 @@ Thanks, you're awesome :-) -->

#### Improvements



#### Deprecated


Expand Down
2 changes: 1 addition & 1 deletion docs/fields/field-details.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5910,7 +5910,7 @@ example: `3`
[[field-log-syslog-severity-name]]
<<field-log-syslog-severity-name, log.syslog.severity.name>>

a| The Syslog numeric severity of the log event, if available.
a| The Syslog text-based severity of the log event, if available.

If the event source publishing via Syslog provides a different severity value (e.g. firewall, IDS), your source's text severity should go to `log.level`. If the event source does not specify a distinct severity, you can optionally copy the Syslog severity to `log.level`.

Expand Down
2 changes: 1 addition & 1 deletion experimental/generated/beats/fields.ecs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3965,7 +3965,7 @@
level: extended
type: keyword
ignore_above: 1024
description: 'The Syslog numeric severity of the log event, if available.
description: 'The Syslog text-based severity of the log event, if available.

If the event source publishing via Syslog provides a different severity value
(e.g. firewall, IDS), your source''s text severity should go to `log.level`.
Expand Down
2 changes: 1 addition & 1 deletion experimental/generated/ecs/ecs_flat.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6502,7 +6502,7 @@ log.syslog.severity.code:
type: long
log.syslog.severity.name:
dashed_name: log-syslog-severity-name
description: 'The Syslog numeric severity of the log event, if available.
description: 'The Syslog text-based severity of the log event, if available.

If the event source publishing via Syslog provides a different severity value
(e.g. firewall, IDS), your source''s text severity should go to `log.level`. If
Expand Down
2 changes: 1 addition & 1 deletion experimental/generated/ecs/ecs_nested.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7990,7 +7990,7 @@ log:
type: long
log.syslog.severity.name:
dashed_name: log-syslog-severity-name
description: 'The Syslog numeric severity of the log event, if available.
description: 'The Syslog text-based severity of the log event, if available.

If the event source publishing via Syslog provides a different severity value
(e.g. firewall, IDS), your source''s text severity should go to `log.level`.
Expand Down
2 changes: 1 addition & 1 deletion generated/beats/fields.ecs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3915,7 +3915,7 @@
level: extended
type: keyword
ignore_above: 1024
description: 'The Syslog numeric severity of the log event, if available.
description: 'The Syslog text-based severity of the log event, if available.

If the event source publishing via Syslog provides a different severity value
(e.g. firewall, IDS), your source''s text severity should go to `log.level`.
Expand Down
2 changes: 1 addition & 1 deletion generated/ecs/ecs_flat.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6433,7 +6433,7 @@ log.syslog.severity.code:
type: long
log.syslog.severity.name:
dashed_name: log-syslog-severity-name
description: 'The Syslog numeric severity of the log event, if available.
description: 'The Syslog text-based severity of the log event, if available.

If the event source publishing via Syslog provides a different severity value
(e.g. firewall, IDS), your source''s text severity should go to `log.level`. If
Expand Down
2 changes: 1 addition & 1 deletion generated/ecs/ecs_nested.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7910,7 +7910,7 @@ log:
type: long
log.syslog.severity.name:
dashed_name: log-syslog-severity-name
description: 'The Syslog numeric severity of the log event, if available.
description: 'The Syslog text-based severity of the log event, if available.

If the event source publishing via Syslog provides a different severity value
(e.g. firewall, IDS), your source''s text severity should go to `log.level`.
Expand Down
2 changes: 1 addition & 1 deletion schemas/log.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -119,7 +119,7 @@
example: Error
short: Syslog text-based severity of the event.
description: >
The Syslog numeric severity of the log event, if available.
The Syslog text-based severity of the log event, if available.

If the event source publishing via Syslog provides a different severity
value (e.g. firewall, IDS), your source's text severity should go to `log.level`.
Expand Down