Http fields: inbound or outbound

Hi, in elastic ECS there's the http section. Is this section reserved for incoming or outgoing http activity?

Hi, @Bert_Vanpeteghem!

By incoming and outgoing activity, do you mean HTTP requests and responses?

The http.* fieldset contains both http.request.* fields (for example, http.request.method) for capturing HTTP request details and http.response.* fields (like, http.response.status_code) for capturing response details.

Hi Eric, I meant: should they be used to instrument http client activity, so outbound requests?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.