Closed shaunmcgough closed 7 months ago
Pinging @elastic/kibana-app
Does ECS address the same-entity-different-field issue?
I know it has source and destination type fields for IPs but using these Graph will show the same IP as 2 different nodes if you don't copy them to a "role-less" indexed field like participant
.
Pinging @elastic/kibana-data-discovery (Team:DataDiscovery)
Pinging @elastic/kibana-visualizations @elastic/kibana-visualizations-external (Team:Visualizations)
Closing this because it's not planned to be resolved in the foreseeable future. It will be tracked in our Icebox and will be re-opened if our priorities change. Feel free to re-open if you think it should be melted sooner.
Graph should check for ECS fields and suggest to the user that they Graph them visually. This would be in a suggestions area of the getting started experience, and when the user is selecting data sources such as index patterns, saved objects, etc. We will likely need to work with the ECS team on the best approach to this - so we are only showing users these options when they have ECS data.