This PR adds file.origin_referrer_url and file.origin_url
To reviewers
Size of the fields
The two fields added in this PR are intended to store URL. Therefore, the default field size of 1024 bytes is insufficient. As a result, we want to set ignore_above to 8k(8192) bytes, if possible.
Default Field
This field will not necessarily be included in all file events.
Therefore, I set it as default_field: false, but please let me know if this is incorrect.
Checklist
make test
?make
and committed those changes?PR summary
This PR adds
file.origin_referrer_url
andfile.origin_url
To reviewers
Size of the fields The two fields added in this PR are intended to store URL. Therefore, the default field size of 1024 bytes is insufficient. As a result, we want to set ignore_above to 8k(8192) bytes, if possible.
Default Field This field will not necessarily be included in all file events. Therefore, I set it as
default_field: false
, but please let me know if this is incorrect.