elastic / ecs

Elastic Common Schema
https://www.elastic.co/what-is/ecs
Apache License 2.0
987 stars 410 forks source link

Add new fields file.origin_referrer_url & file.origin_url #2348

Open AsuNa-jp opened 1 week ago

AsuNa-jp commented 1 week ago

Checklist

PR summary

This PR adds file.origin_referrer_url and file.origin_url

To reviewers

Size of the fields The two fields added in this PR are intended to store URL. Therefore, the default field size of 1024 bytes is insufficient. As a result, we want to set ignore_above to 8k(8192) bytes, if possible.

Default Field This field will not necessarily be included in all file events. Therefore, I set it as default_field: false, but please let me know if this is incorrect.