Skip to content

Incorrect generated/beats/fields.ecs.yml, not accounting on top_level: false  #2277

@aleksmaus

Description

@aleksmaus

Description of the issue:

We are using the following file as a source of ECS mappings for osquery_manager integration:
https://github.com/elastic/ecs/blob/main/generated/beats/fields.ecs.yml

It does have as field at the the top level there, which causes our integration validation to fail for 3.0.0 format spec.

As far as I understand generated file should not include as field at the top level because it is marked with top_level: false attribute.

top_level: false

Currently it has

Screenshot 2023-09-20 at 10 21 06 AM

and not additional information for us of the field is a top level or not
Screenshot 2023-09-20 at 10 22 00 AM

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions