ecs.yml

- name: ecs.version
  external: ecs
- name: event.code
  external: ecs
- name: event.created
  external: ecs
- name: host.hostname
  external: ecs
- name: host.id
  external: ecs
- name: log.syslog.facility.code
  external: ecs
- name: log.syslog.priority
  external: ecs
- name: log.syslog.appname
  external: ecs
- name: log.syslog.procid
  external: ecs
- name: log.origin.file.line
  external: ecs
- name: log.origin.file.name
  external: ecs
- name: log.origin.function
  external: ecs
- name: message
  external: ecs
- name: process.args
  external: ecs
- name: process.args_count
  external: ecs
- name: process.command_line
  external: ecs
- name: process.pid
  external: ecs
- name: tags
  external: ecs
- name: user.group.id
  external: ecs
- name: user.id
  external: ecs
- name: process.thread.capabilities.effective
  external: ecs