Update AWC ECS container id regex

We have new evidence that ID part may end in 9 digits not just 10 digits.
elastic · Aug 20, 2024 · 52b1c74 · 52b1c74
1 parent da47c13
commit 52b1c74
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/specs/agents/metadata.md b/specs/agents/metadata.md
@@ -110,7 +110,7 @@ On Linux, the container ID and some of the Kubernetes metadata can be extracted
 
     - `^[[:xdigit:]]{64}$`
     - `^[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4,}$`
-    - `^[[:xdigit:]]{32}-[[:digit:]]{10}$` (AWS ECS/Fargate environments)
+    - `^[[:xdigit:]]{32}-[[:digit:]]{9,10}$` (AWS ECS/Fargate environments)
 
  If we match, then the basename is assumed to be a container ID.