Add domain to email.* Fields
#2392
Conversation
MakoWish
changed the title
domain to email.* Fields
|
Hi! We just realized that we haven't looked into this PR in a while. We're We're labeling this PR as Thank you for your contribution! |
|
I would still like to see this implemented. |
| @@ -16,6 +16,13 @@ Thanks, you're awesome :-) --> | |||
|
|
|||
| #### Added | |||
|
|
|||
| * Added `volume.*` as beta field set. #2269 | |||
There was a problem hiding this comment.
your changelog is outdated, we have released a new version since then
| The domain of the email sender. | ||
| example: "example.com" | ||
| normalize: | ||
| - array |
| The domain of the sender address. | ||
| example: "example.com" | ||
| normalize: | ||
| - array |
There was a problem hiding this comment.
the same question - why it’s an array
|
Could you please check https://github.com/elastic/ecs/blob/main/CONTRIBUTING.md and create all autogenerated files and docs? |
|
Also please note we are currently in the process of ECS donation to Open telemetry schema, so we are not accepting PRs without a proper introduction of the same fields into Otel. In simple or important cases we might though make an exception |
This PR is to add email.from.domain and email.to.domain to ECS. These changes will help to visualize and report on emails sent to/from a specific domain/company.