search

elastic / beats

:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash
https://www.elastic.co/products/beats
Other
111 stars 4.93k forks source link

Journald documentation and implementation diverge about the translation of `_HOSTNAME` to ECS #41635

Open belimawr opened 2 weeks ago

belimawr commented 2 weeks ago

The current implementation from Journald input translates _HOSTNAME to host.hostname: https://github.com/elastic/beats/blob/367d94e1dc40a82713d651735eac7921bb584474/filebeat/input/journald/pkg/journalfield/default.go#L57C3-L57C12

However our documentation states that _HOSTNAME is translated to host.name.

We need to make our documentation and implementation match as well as clarify the difference between those two fields.

elasticmachine commented 2 weeks ago

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)