Add error.stack_trace

CHANGELOG.next.md

@@ -10,6 +10,7 @@ Thanks, you're awesome :-) -->
 ### Bugfixes
 
 ### Added
+* Added `error.stack_trace` field. #562
 
 ### Improvements
 

docs/field-details.asciidoc

@@ -1018,6 +1018,17 @@ type: text
 
 // ===============================================================
 
+| error.stack_trace
+| The stack trace of this error in plain text.
+
+type: keyword
+
+
+
+| extended
+
+// ===============================================================
+
 |=====
 
 [[ecs-event]]

generated/beats/fields.ecs.yml

@@ -813,6 +813,11 @@
       level: core
       type: text
       description: Error message.
+    - name: stack_trace
+      level: extended
+      type: keyword
+      ignore_above: 1024
+      description: The stack trace of this error in plain text.
   - name: event
     title: Event
     group: 2

generated/csv/fields.csv

@@ -99,6 +99,7 @@ ecs.version,keyword,core,1.0.0,1.2.0-dev
 error.code,keyword,core,,1.2.0-dev
 error.id,keyword,core,,1.2.0-dev
 error.message,text,core,,1.2.0-dev
+error.stack_trace,keyword,extended,,1.2.0-dev
 event.action,keyword,core,user-password-change,1.2.0-dev
 event.category,keyword,core,user-management,1.2.0-dev
 event.code,keyword,extended,4648,1.2.0-dev

generated/ecs/ecs_flat.yml

@@ -1104,6 +1104,17 @@ error.message:
   order: 1
   short: Error message.
   type: text
+error.stack_trace:
+  description: The stack trace of this error in plain text.
+  doc_values: false
+  flat_name: error.stack_trace
+  ignore_above: 1024
+  index: false
+  level: extended
+  name: stack_trace
+  order: 3
+  short: The stack trace of this error in plain text.
+  type: keyword
 event.action:
   description: 'The action captured by the event.
 

generated/ecs/ecs_nested.yml

@@ -1296,6 +1296,17 @@ error:
       order: 1
       short: Error message.
       type: text
+    stack_trace:
+      description: The stack trace of this error in plain text.
+      doc_values: false
+      flat_name: error.stack_trace
+      ignore_above: 1024
+      index: false
+      level: extended
+      name: stack_trace
+      order: 3
+      short: The stack trace of this error in plain text.
+      type: keyword
   group: 2
   name: error
   prefix: error.

generated/elasticsearch/6/template.json

@@ -492,6 +492,12 @@
             "message": {
               "norms": false, 
               "type": "text"
+            }, 
+            "stack_trace": {
+              "doc_values": false, 
+              "ignore_above": 1024, 
+              "index": false, 
+              "type": "keyword"
             }
           }
         }, 

generated/elasticsearch/7/template.json

@@ -491,6 +491,12 @@
           "message": {
             "norms": false, 
             "type": "text"
+          }, 
+          "stack_trace": {
+            "doc_values": false, 
+            "ignore_above": 1024, 
+            "index": false, 
+            "type": "keyword"
           }
         }
       }, 

generated/legacy/template.json

@@ -313,6 +313,11 @@
             "message": {
               "norms": false,
               "type": "text"
+            },
+            "stack_trace": {
+              "ignore_above": 1024,
+              "index": false,
+              "type": "keyword"
             }
           }
         },

schema.json

@@ -722,6 +722,16 @@
         "name": "error.message", 
         "required": false, 
         "type": "text"
+      }, 
+      "error.stack_trace": {
+        "description": "The stack trace of this error in plain text.", 
+        "example": "", 
+        "footnote": "", 
+        "group": 2, 
+        "level": "extended", 
+        "name": "error.stack_trace", 
+        "required": false, 
+        "type": "(not indexed)"
       }
     }, 
     "group": 2, 

schemas/error.yml

@@ -28,3 +28,11 @@
       type: keyword
       description: >
         Error code describing the error.
+
+    - name: stack_trace
+      level: extended
+      type: keyword
+      index: false
+      description: >
+        The stack trace of this error in plain text.
+