- Remove
host.user.*
field reuse. #1439 - Remove deprecation notice on
http.request.method
. #1443 - Migrate
log.origin.file.line
frominteger
tolong
. #1533 - Remove
log.original
field. #1580 - Remove
process.ppid
field. #1596
- Wildcard type field migration GA. #1582
match_only_text
type field migration GA. #1584- Threat indicator fields GA from RFC 0008. #1586
- Removing deprecated --oss from generator #1404
- Removing use-cases directory #1405
- Remove Go code generator. #1567
- Remove remaining Go deps after removing Go code generator. #1585
- Added
file.fork_name
field. #1288 - Added
service.address
field. #1537 - Added
service.environment
as a beta field. #1541 - Added
process.end
field. #1544 - Added container metric fields into experimental schema. #1546
- Add
code_signature.digest_algorithm
andcode_signature.timestamp
fields. #1557 - Add
email.*
field set in the experimental fields. #1569
- Beta migration on some
keyword
fields towildcard
. #1517 - Promote
threat.software.*
andthreat.group.*
fields to GA. #1540 - Update
user.name
anduser.id
examples for clarity. #1566 - Beta migration of
text
and.text
multi-fields tomatch_only_text
. #1532, #1571
- Support ES 6.x type fallback for
match_only_text
field types. #1528
- Document field type family interoperability in FAQ. #1591