Track Elastic Common Schema (ECS) compatibility in Logstash

[karenzone]

Elastic Common Schema (ECS) support

ECS compatibility is off-by-default in Logstash 7.x, but will be on-by-default in Logstash 8.0. See this topic for more information on ECS configuration and behavior: https://www.elastic.co/guide/en/logstash/7.x/ecs-ls.html

• [x] pipeline.ecs_compatibility setting in logstash.yml to allow users to control ECS compatibility of all plugins in a pipeline at once instead of configuring each instance separately (7.10.0)
• [x] Allow per-pipeline config of ECS Compatibility mode via Central Management #12861 (7.14.0)

Inputs

• [ ] azure_event_hubs input
• [x] beats input 6.1.0 (7.12.0)
• [x] elasticsearch input 4.9.0 (7.11.0) - adds target option
• [x] file input 4.3.0 (7.13.0)
• [ ] generator input
• [x] heartbeat input 3.1.0
• [x] http input 3.4.0 (7.14.0)
• [x] http_poller 5.1.0
• [x] jdbc input 5.1.0 (7.14.0)
• [ ] kafka input (in progress)
• [x] rabbitmq input - no changes required
• [x] redis input - no changes required
• [x] s3 input 3.7.0
• [x] stdin input 3.3.0 (7.13.0)
• [x] syslog input 3.5.0 (7.13.0)
• [x] tcp input 6.2.0 (7.14.0)
• [x] udp input 3.4.0 (7.12.0)

Filters

• [ ] cidr filter
• [x] clone filter 4.1.1 (7.13.0)
• [x] csv filter 3.1.0 (7.14.0)
• [ ] date filter
• [ ] dissect filter
• [ ] dns filter
• [ ] drop filter
• [ ] elasticsearch filter
• [x] fingerprint filter 3.3.0 (7.14.0)
• [x] geoip filter 7.1.0 (7.13.0)
• [x] grok filter 4.4.0 (7.12.0)
  • [x] core patterns 4.3.0 (7.12.0)
• [ ] http filter
• [x] jdbc_static filter 5.1.0 (7.14.0)
• [ ] jdbc_streaming filter
• [x] json filter 3.2.0 (7.14.0)
• [x] kv filter 4.5.0
• [x] logstash-filter-json 3.2.0 (7.14.0)
• [ ] memcached filter
• [ ] mutate filter
• [ ] prune filter
• [ ] ruby filter
• [ ] sleep filter
• [ ] split filter
• [x] syslog_pri filter 3.1.0 (7.13.0)
• [x] translate filter 3.3.0 (7.14.0)
• [x] tld filter 3.1.1 (7.13.0)
• [ ] truncate filter
• [ ] urldecode filter
• [x] useragent filter 3.3.0 (7.14.0)
• [ ] uuid filter
• [ ] xml filter

Codecs

• [x] avro codec 3.3.0
• [x] cef codec 6.2.0 (7.13.0)
• [ ] es_bulk
• [x] json 3.1.0 (7.14.0)
• [x] json_lines 3.1.0 (7.14.0)
• [x] line 3.1.0
• [x] multiline
• [x] plain
• [ ] rubydebug

Outputs

• [ ] elastic_app_search output
• [x] elasticsearch output 10.6.0 (7.9.0)
• [x] email output - no changes required
• [x] file output - no changes required
• [x] http output - no changes required
• [x] kafka output - no changes required
• [x] rabbitmq output - no changes required
• [x] redis output - no changes required
• [x] s3 output - no changes required
• [x] stdout output - no changes required
• [x] tcp output - no changes required
• [x] udp output - no changes required

[karenzone]

Replaced by 11635, the new source of record.