Open mbudge opened 8 months ago
Pinging @elastic/obs-ux-infra_services-team (Team:obs-ux-infra_services)
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
I proposed adding event.zone and event.environment to ecs in this ticket https://github.com/elastic/ecs/issues/2306
We use event.zone to track which region of the network the event was collected from. This is because we have different IT teams responsible for different network zones in different countries.
event.environment helps users identify if they are reviewing events from prod, dev, uat, test, dmz, vdi.
We set these fields in filebeat processors through Fleet UI.
Having drop-downs in the Observability hosts page would be a big improvement for businesses like ours. This is because it would allow our IT teams select the hosts they are responsible for monitoring. They can quickly review the metrics data for their hosts.
We would use these fields to trigger different alerting processes to each time. This is each IT team receive alerts for hosts in the network zone they are responsible for monitoring.