search

elastic / ecs-dotnet

https://www.elastic.co/guide/en/ecs-logging/dotnet/current/setup.html
Apache License 2.0
108 stars 54 forks source link

#398 set Event Kind to event if not provided #399

Closed thompson-tomo closed 1 month ago

thompson-tomo commented 1 month ago

With this change the logs will now default to be being recorded as having the event kind of event which is the most common.

Closes #398

Mpdreamz commented 1 month ago

Hi @thompson-tomo thanks for the PR.

The ecs categorization fields should be empty by default as per: https://www.elastic.co/guide/en/ecs/current/ecs-category-field-values-reference.html

If your events don’t match any of these categorization values, you should leave the fields empty. This will ensure you can start populating the fields once the appropriate categorization values are published, in a later release.

If someone wants event.kind to be event by default I think they have to actively choose to do so themselves.