[journald] ECS conflicts with host.ip and source.ip fields #9690
Labels
Integration:journald
Custom Journald logs
Team:Elastic-Agent-Data-Plane
Label for the Agent Data Plane team [elastic/elastic-agent-data-plane]
Hey,
after installing the Journald integration in my 8.12.1 Kibana / Fleet, I saw mapping conflicts in the logs-* Data View. The data quality dashboard shows these issues as well:
Journald integration uses the logs-logs dataset, and it seems to lack mappings for the fields
source.ip
andhost.ip
in the package component template.Indeed, https://github.com/elastic/integrations/blob/main/packages/journald/fields/ecs.yml seems to be missing the references to source.ip / host.ip. I'm not sure if this is the correct place to add them though.
The text was updated successfully, but these errors were encountered: