# Email fields in ECS 1.5

**URL:** <https://discuss.elastic.co/t/email-fields-in-ecs-1-5/239359>\
**Category:** Elasticsearch\
**Tags:** ecs-elastic-common-schema\
**Created:** [June 30, 2020, 6:21pm UTC](https://discuss.elastic.co/t/email-fields-in-ecs-1-5/239359 "2020-06-30T18:21:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sidahmed](https://avatars.discourse-cdn.com/v4/letter/s/3da27b/32.png) [@sidahmed](https://discuss.elastic.co/u/sidahmed)\
**Post date:** [June 30, 2020, 6:21pm UTC](https://discuss.elastic.co/t/email-fields-in-ecs-1-5/239359/1 "2020-06-30T18:21:12Z")

</div>

I have some email fields that i'm indexing. My problem is, fields like `CC`, `Subject` ...; don't seem to fit in ECS (Elastic Common Schema).

Is ELK team willing to add these fiels in next ECS versions ? or should I use custom fields to achieve my goal.

Thank you in advance for your answer.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [June 30, 2020, 6:36pm UTC](https://discuss.elastic.co/t/email-fields-in-ecs-1-5/239359/2 "2020-06-30T18:36:27Z")

</div>

I believe you'd like something like this?

> <https://github.com/elastic/ecs/issues/411>
>
> Hey team, just working through the schema and there doesn't appear to be a defined schema for email in order to...

---

<div class="post-metadata">

**Author:** ![ebeahan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ebeahan/32/78989_2.png) [@ebeahan](https://discuss.elastic.co/u/ebeahan)\
**Post date:** [June 30, 2020, 7:40pm UTC](https://discuss.elastic.co/t/email-fields-in-ecs-1-5/239359/3 "2020-06-30T19:40:56Z")

</div>

Hi @sidahmed - welcome to the community!

You are correct that as of ECS 1.5.0 there are no field sets defined specific to email. Please free to add any suggestions or use case details to the ongoing GitHub discussion @dadoonet linked above.

You're welcome to add [custom fields](https://www.elastic.co/guide/en/ecs/current/ecs-custom-fields-in-ecs.html) to your events to suit your needs. It is also welcome to nest existing ECS fields within your custom fields to give your events the same consistency and feel as the rest of ECS.

---

<div class="post-metadata">

**Author:** ![sidahmed](https://avatars.discourse-cdn.com/v4/letter/s/3da27b/32.png) [@sidahmed](https://discuss.elastic.co/u/sidahmed)\
**Post date:** [July 1, 2020, 10:11am UTC](https://discuss.elastic.co/t/email-fields-in-ecs-1-5/239359/5 "2020-07-01T10:11:43Z")

</div>

Thank you for both your answers. I'll take a look at your suggestions.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 29, 2020, 10:12am UTC](https://discuss.elastic.co/t/email-fields-in-ecs-1-5/239359/6 "2020-07-29T10:12:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.