Data Streams with ECS mapping

I use Logstash to create data streams like that: logs-syslog.message-namespace

What's the best way to link a "legacy" ECS template ecs-logstash (which gets installed automatically) to that data stream?

ELK version: 7.12


just found a related ticket: Logstash Integration with Elasticsearch Data Streams
Glad to know, that you guys are working on that.

So, what do you think, how ECS could be linked to DS templates in the meantime?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.