# Data Streams with ECS mapping

**URL:** <https://discuss.elastic.co/t/data-streams-with-ecs-mapping/271765>\
**Category:** Elasticsearch\
**Tags:** datastreams\
**Created:** [April 30, 2021, 11:03am UTC](https://discuss.elastic.co/t/data-streams-with-ecs-mapping/271765 "2021-04-30T11:03:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jetnet](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Post date:** [April 30, 2021, 11:03am UTC](https://discuss.elastic.co/t/data-streams-with-ecs-mapping/271765/1 "2021-04-30T11:03:35Z")

</div>

I use Logstash to create data streams like that: `logs-syslog.message-namespace`

What's the best way to link a "legacy" ECS template `ecs-logstash` (which gets installed automatically) to that data stream?

ELK version: 7.12

Thanks!

---

<div class="post-metadata">

**Author:** ![jetnet](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Post date:** [April 30, 2021, 12:00pm UTC](https://discuss.elastic.co/t/data-streams-with-ecs-mapping/271765/2 "2021-04-30T12:00:30Z")

</div>

just found a related ticket: [Logstash Integration with Elasticsearch Data Streams](https://github.com/elastic/logstash/issues/12178)  
Glad to know, that you guys are working on that.

So, what do you think, how ECS could be linked to DS templates in the meantime?  
Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 28, 2021, 12:01pm UTC](https://discuss.elastic.co/t/data-streams-with-ecs-mapping/271765/3 "2021-05-28T12:01:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.