elastic / elastic/integrations

[Bug] Elastic Agent Metricbeat Data Stream incorrectly maps `network` field as a `keyword` rather than an `object`

Open
#1,572 10 comments 0 reactions 0 assignees View on GitHub
Integration:elastic_agent Stalled Team:Elastic-Agent
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

Elastic Agent 7.14.0 Metircbeat Data Stream incorrectly maps the `network` field as a `keyword`, rather than an `object` as specified by [ECS](https://www.elastic.co/guide/en/ecs/1.11/ecs-network.html)

This is causing an issue in Kibana as its causing a mapping conflict within the Kibana Index Pattern `logs-*`

Example:

`GET /.ds-logs-elastic_agent.metricbeat-dev-2021.08.25-000001/_mapping/field/network`

```json
{
".ds-logs-elastic_agent.metricbeat-dev-2021.08.25-000001" : {
"mappings" : {
"network" : {
"full_name" : "network",
"mapping" : {
"network" : {
"type" : "keyword",
"ignore_above" : 1024
}
}
}
}
}
}
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.