It appears that all Filebeat modules currently export ECS version 1.12 fields.
Running command from
$ ggrep -Fr 'ecs.version: 1.12' | wc -l 140 brsolomon ~/dev/3pty/beats/x-pack/filebeat/module -> main $ ggrep -Fr 'ecs.version: 8' | wc -l 0
- Is there a plan and/or timeline to update modules to export ECS 8.0 schemas?
- Would this mean dropping support for exporting the 1.12 versions, or would the goal be for dual compatibility?