ECS - Exported fields origin of rsa.foo.*

Elastic Stack Beats
,
1

I'm currently implementing 'ECS' for our in house products and I was wondering what the origin or meaning of the 'rsa' fields are?
It is unusual in that they span multiple vendors and am wondering what the 'rsa' acronym stands for.

Examples:
rsa.internal.msg_id from cisco fields and juniper fields

What does the 'rsa' acronym stand for?

2

It comes from GitHub - blookot/rsa2elk: Converts Netwitness log parser configuration to Logstash configuration and was used as an easy way to create some of the modules. It will go away in the future as the Agent integrations are built out.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.