From 52cec418b66507d2dd846f0a824aa458d532a16b Mon Sep 17 00:00:00 2001 From: Asuka Nakajima Date: Wed, 5 Feb 2025 03:52:25 +0000 Subject: [PATCH] reflect the feedback & add generated files --- docs/fields/field-details.asciidoc | 16 ++++++++++++---- experimental/generated/ecs/ecs_flat.yml | 8 ++++++++ experimental/generated/ecs/ecs_nested.yml | 8 ++++++++ generated/ecs/ecs_flat.yml | 8 ++++++++ generated/ecs/ecs_nested.yml | 8 ++++++++ schemas/dll.yml | 1 + schemas/file.yml | 2 ++ schemas/process.yml | 2 ++ 8 files changed, 49 insertions(+), 4 deletions(-) diff --git a/docs/fields/field-details.asciidoc b/docs/fields/field-details.asciidoc index 5ce15b64b..7f5679e36 100644 --- a/docs/fields/field-details.asciidoc +++ b/docs/fields/field-details.asciidoc @@ -1845,7 +1845,9 @@ example: `kernel32.dll` [[field-dll-origin-referrer-url]] <> -a| The URL of the webpage that linked to the dll file. +a| beta:[ This field is beta and subject to change. ] + +The URL of the webpage that linked to the dll file. type: keyword @@ -1861,7 +1863,9 @@ example: `http://example.com/article1.html` [[field-dll-origin-url]] <> -a| The URL where the dll file is hosted. +a| beta:[ This field is beta and subject to change. ] + +The URL where the dll file is hosted. type: keyword @@ -4483,7 +4487,9 @@ image:https://img.shields.io/badge/OpenTelemetry-4a5ca6?style=flat&logo=opentele [[field-file-origin-referrer-url]] <> -a| The URL of the webpage that linked to the file. +a| beta:[ This field is beta and subject to change. ] + +The URL of the webpage that linked to the file. type: keyword @@ -4499,7 +4505,9 @@ example: `http://example.com/article1.html` [[field-file-origin-url]] <> -a| The URL where the file is hosted. +a| beta:[ This field is beta and subject to change. ] + +The URL where the file is hosted. type: keyword diff --git a/experimental/generated/ecs/ecs_flat.yml b/experimental/generated/ecs/ecs_flat.yml index efd8b577c..1c383350b 100644 --- a/experimental/generated/ecs/ecs_flat.yml +++ b/experimental/generated/ecs/ecs_flat.yml @@ -2113,6 +2113,7 @@ dll.name: short: Name of the library. type: keyword dll.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: dll-origin-referrer-url description: The URL of the webpage that linked to the dll file. example: http://example.com/article1.html @@ -2124,6 +2125,7 @@ dll.origin_referrer_url: short: The URL of the webpage that linked to the dll file. type: keyword dll.origin_url: + beta: This field is beta and subject to change. dashed_name: dll-origin-url description: The URL where the dll file is hosted. example: http://example.com/files/example.dll @@ -5174,6 +5176,7 @@ file.name: short: Name of the file including the extension, without the directory. type: keyword file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -5185,6 +5188,7 @@ file.origin_referrer_url: short: The URL of the webpage that linked to the file. type: keyword file.origin_url: + beta: This field is beta and subject to change. dashed_name: file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg @@ -16073,6 +16077,7 @@ threat.enrichments.indicator.file.name: short: Name of the file including the extension, without the directory. type: keyword threat.enrichments.indicator.file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: threat-enrichments-indicator-file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -16085,6 +16090,7 @@ threat.enrichments.indicator.file.origin_referrer_url: short: The URL of the webpage that linked to the file. type: keyword threat.enrichments.indicator.file.origin_url: + beta: This field is beta and subject to change. dashed_name: threat-enrichments-indicator-file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg @@ -18834,6 +18840,7 @@ threat.indicator.file.name: short: Name of the file including the extension, without the directory. type: keyword threat.indicator.file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: threat-indicator-file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -18846,6 +18853,7 @@ threat.indicator.file.origin_referrer_url: short: The URL of the webpage that linked to the file. type: keyword threat.indicator.file.origin_url: + beta: This field is beta and subject to change. dashed_name: threat-indicator-file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg diff --git a/experimental/generated/ecs/ecs_nested.yml b/experimental/generated/ecs/ecs_nested.yml index fa5b34b78..d5e6aaac4 100644 --- a/experimental/generated/ecs/ecs_nested.yml +++ b/experimental/generated/ecs/ecs_nested.yml @@ -2612,6 +2612,7 @@ dll: short: Name of the library. type: keyword dll.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: dll-origin-referrer-url description: The URL of the webpage that linked to the dll file. example: http://example.com/article1.html @@ -2623,6 +2624,7 @@ dll: short: The URL of the webpage that linked to the dll file. type: keyword dll.origin_url: + beta: This field is beta and subject to change. dashed_name: dll-origin-url description: The URL where the dll file is hosted. example: http://example.com/files/example.dll @@ -6235,6 +6237,7 @@ file: short: Name of the file including the extension, without the directory. type: keyword file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -6246,6 +6249,7 @@ file: short: The URL of the webpage that linked to the file. type: keyword file.origin_url: + beta: This field is beta and subject to change. dashed_name: file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg @@ -18814,6 +18818,7 @@ threat: short: Name of the file including the extension, without the directory. type: keyword threat.enrichments.indicator.file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: threat-enrichments-indicator-file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -18826,6 +18831,7 @@ threat: short: The URL of the webpage that linked to the file. type: keyword threat.enrichments.indicator.file.origin_url: + beta: This field is beta and subject to change. dashed_name: threat-enrichments-indicator-file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg @@ -21583,6 +21589,7 @@ threat: short: Name of the file including the extension, without the directory. type: keyword threat.indicator.file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: threat-indicator-file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -21595,6 +21602,7 @@ threat: short: The URL of the webpage that linked to the file. type: keyword threat.indicator.file.origin_url: + beta: This field is beta and subject to change. dashed_name: threat-indicator-file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg diff --git a/generated/ecs/ecs_flat.yml b/generated/ecs/ecs_flat.yml index 1bc0884f6..b12d8e90a 100644 --- a/generated/ecs/ecs_flat.yml +++ b/generated/ecs/ecs_flat.yml @@ -2044,6 +2044,7 @@ dll.name: short: Name of the library. type: keyword dll.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: dll-origin-referrer-url description: The URL of the webpage that linked to the dll file. example: http://example.com/article1.html @@ -2055,6 +2056,7 @@ dll.origin_referrer_url: short: The URL of the webpage that linked to the dll file. type: keyword dll.origin_url: + beta: This field is beta and subject to change. dashed_name: dll-origin-url description: The URL where the dll file is hosted. example: http://example.com/files/example.dll @@ -5105,6 +5107,7 @@ file.name: short: Name of the file including the extension, without the directory. type: keyword file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -5116,6 +5119,7 @@ file.origin_referrer_url: short: The URL of the webpage that linked to the file. type: keyword file.origin_url: + beta: This field is beta and subject to change. dashed_name: file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg @@ -16004,6 +16008,7 @@ threat.enrichments.indicator.file.name: short: Name of the file including the extension, without the directory. type: keyword threat.enrichments.indicator.file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: threat-enrichments-indicator-file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -16016,6 +16021,7 @@ threat.enrichments.indicator.file.origin_referrer_url: short: The URL of the webpage that linked to the file. type: keyword threat.enrichments.indicator.file.origin_url: + beta: This field is beta and subject to change. dashed_name: threat-enrichments-indicator-file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg @@ -18765,6 +18771,7 @@ threat.indicator.file.name: short: Name of the file including the extension, without the directory. type: keyword threat.indicator.file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: threat-indicator-file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -18777,6 +18784,7 @@ threat.indicator.file.origin_referrer_url: short: The URL of the webpage that linked to the file. type: keyword threat.indicator.file.origin_url: + beta: This field is beta and subject to change. dashed_name: threat-indicator-file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg diff --git a/generated/ecs/ecs_nested.yml b/generated/ecs/ecs_nested.yml index 58e5bca9e..fb97c570f 100644 --- a/generated/ecs/ecs_nested.yml +++ b/generated/ecs/ecs_nested.yml @@ -2532,6 +2532,7 @@ dll: short: Name of the library. type: keyword dll.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: dll-origin-referrer-url description: The URL of the webpage that linked to the dll file. example: http://example.com/article1.html @@ -2543,6 +2544,7 @@ dll: short: The URL of the webpage that linked to the dll file. type: keyword dll.origin_url: + beta: This field is beta and subject to change. dashed_name: dll-origin-url description: The URL where the dll file is hosted. example: http://example.com/files/example.dll @@ -6155,6 +6157,7 @@ file: short: Name of the file including the extension, without the directory. type: keyword file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -6166,6 +6169,7 @@ file: short: The URL of the webpage that linked to the file. type: keyword file.origin_url: + beta: This field is beta and subject to change. dashed_name: file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg @@ -18734,6 +18738,7 @@ threat: short: Name of the file including the extension, without the directory. type: keyword threat.enrichments.indicator.file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: threat-enrichments-indicator-file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -18746,6 +18751,7 @@ threat: short: The URL of the webpage that linked to the file. type: keyword threat.enrichments.indicator.file.origin_url: + beta: This field is beta and subject to change. dashed_name: threat-enrichments-indicator-file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg @@ -21503,6 +21509,7 @@ threat: short: Name of the file including the extension, without the directory. type: keyword threat.indicator.file.origin_referrer_url: + beta: This field is beta and subject to change. dashed_name: threat-indicator-file-origin-referrer-url description: The URL of the webpage that linked to the file. example: http://example.com/article1.html @@ -21515,6 +21522,7 @@ threat: short: The URL of the webpage that linked to the file. type: keyword threat.indicator.file.origin_url: + beta: This field is beta and subject to change. dashed_name: threat-indicator-file-origin-url description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg diff --git a/schemas/dll.yml b/schemas/dll.yml index a3f97e53a..86d558a0e 100644 --- a/schemas/dll.yml +++ b/schemas/dll.yml @@ -60,3 +60,4 @@ ignore_above: 8192 description: The URL where the dll file is hosted. example: http://example.com/files/example.dll + beta: This field is beta and subject to change. diff --git a/schemas/file.yml b/schemas/file.yml index 019ada89e..cd2249831 100644 --- a/schemas/file.yml +++ b/schemas/file.yml @@ -259,6 +259,7 @@ ignore_above: 8192 description: The URL of the webpage that linked to the file. example: http://example.com/article1.html + beta: This field is beta and subject to change. - name: origin_url level: extended @@ -266,3 +267,4 @@ ignore_above: 8192 description: The URL where the file is hosted. example: http://example.com/imgs/article1_img1.jpg + beta: This field is beta and subject to change. diff --git a/schemas/process.yml b/schemas/process.yml index e66df284b..fc3862a7d 100644 --- a/schemas/process.yml +++ b/schemas/process.yml @@ -493,6 +493,7 @@ ignore_above: 8192 description: The URL of the webpage that linked to the process's executable file. example: http://example.com/article1.html + beta: This field is beta and subject to change. - name: origin_url level: extended @@ -500,3 +501,4 @@ ignore_above: 8192 description: The URL where the process's executable file is hosted. example: http://example.com/files/example.exe + beta: This field is beta and subject to change.