# Elasticsearch common data model **URL:** \ **Category:** Kibana\ **Tags:** ecs-elastic-common-schema\ **Created:** [May 18, 2021, 12:33pm UTC](https://discuss.elastic.co/t/elasticsearch-common-data-model/273283 "2021-05-18T12:33:48Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![daya.ems](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/daya.ems/32/88894_2.png) [@daya.ems](https://discuss.elastic.co/u/daya.ems)\ **Post date:** [May 18, 2021, 12:33pm UTC](https://discuss.elastic.co/t/elasticsearch-common-data-model/273283/1 "2021-05-18T12:33:48Z")
Hi All, Hope you are doing great and safe..!!! I am new into Elasticsearch stack and want implement elasticsearch common data model for our project . I am not sure where to start this topic.and how to Implement this into our projects. I have already check some of blogs and document but not sure where to start . we have already implemented elasticsearch in our environment. now team want implement ECS for all comming data from Logstash , filebeats , syslogs and remedy ITSM and some of monitoring tools like IBM netcool, Zabbix, Nagios etc. .. Please help here how and where i can start this topic. ---
**Author:** ![ebeahan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ebeahan/32/78989_2.png) [@ebeahan](https://discuss.elastic.co/u/ebeahan)\ **Post date:** [May 18, 2021, 5:15pm UTC](https://discuss.elastic.co/t/elasticsearch-common-data-model/273283/2 "2021-05-18T17:15:20Z")
Hi, @daya.ems! Welcome to the community! The ECS documentation is a great place to start. I'd recommend first reading the [Getting Started](https://www.elastic.co/guide/en/ecs/current/ecs-getting-started.html) section and then reviewing the rest of the `Using ECS` sections. Any of your Beats data sources using currently supported modules will already be using ECS. If you have other data sources with custom fields to map to ECS, take a look at [ecs-mapper](https://github.com/elastic/ecs-mapper). ECS-mapper is an experimental tool that uses a CSV to map custom fields to ECS fields and then generates starter pipeline configurations. Some additional tooling is maintained in the [ECS GitHub repo](https://github.com/elastic/ecs) to help generate and maintain Elasticsearch index mappings based on ECS fields. Finally, there's a lot of great discussions available in past posts here! Check out some of the past ECS tagged discussions here: [Topics tagged ecs-elastic-common-schema](https://discuss.elastic.co/tag/ecs-elastic-common-schema) ---
**Author:** ![daya.ems](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/daya.ems/32/88894_2.png) [@daya.ems](https://discuss.elastic.co/u/daya.ems)\ **Post date:** [May 19, 2021, 11:03am UTC](https://discuss.elastic.co/t/elasticsearch-common-data-model/273283/3 "2021-05-19T11:03:11Z")
Many Thanks @ebeahan for your prompt response . still I am not found information regarding that repo and ecs-mapper where i can run that its need separate machine for that or its can be run same Elasticsearch machine . ---
**Author:** ![ebeahan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ebeahan/32/78989_2.png) [@ebeahan](https://discuss.elastic.co/u/ebeahan)\ **Post date:** [May 19, 2021, 10:11pm UTC](https://discuss.elastic.co/t/elasticsearch-common-data-model/273283/4 "2021-05-19T22:11:57Z")
You'll likely want to run `ecs-mapper` on your desktop or laptop client machine. A couple more resources that touch on `ecs-mapper` that might be useful: - This talk from ElasticON 2020 covers different approaches to mapping data sources to ECS and shows a demo of `ecs-mapper`: [The importance of normalizing your security data to ECS | Elastic](https://www.elastic.co/elasticon/archive/2020/global/the-importance-of-normalizing-your-security-data-to-ecs) - This blog is focused on normalizing data sources for the Elastic Security solution, but the concepts of mapping and normalizing your data with ECS apply beyond the security use case: [Adding new security data sources to Elastic SIEM | Elastic Blog](https://www.elastic.co/blog/getting-started-adding-new-security-data-source-in-elastic-siem) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 16, 2021, 10:12pm UTC](https://discuss.elastic.co/t/elasticsearch-common-data-model/273283/5 "2021-06-16T22:12:46Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.