It appears that all Filebeat modules currently export ECS version 1.12 fields.
Running command from beats/x-pack/filebeat/module
:
$ ggrep -Fr 'ecs.version: 1.12' | wc -l
140
brsolomon ~/dev/3pty/beats/x-pack/filebeat/module -> main
$ ggrep -Fr 'ecs.version: 8' | wc -l
0
- Is there a plan and/or timeline to update modules to export ECS 8.0 schemas?
- Would this mean dropping support for exporting the 1.12 versions, or would the goal be for dual compatibility?