github-mirrors/elasticsearch
1
0
Fork 0
mirror of https://github.com/elastic/elasticsearch.git synced 2025-06-28 09:28:55 -04:00
Code Issues Projects Releases Packages Wiki Activity

Fix the rendering of a table in the normalize_for_stream docs (#129345)

Browse source
This commit is contained in:
Joe Gallo 2025-06-12 11:02:48 -04:00 • committed by GitHub
parent 668fe29a00
commit 87ed699352
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
docs/reference/enrich-processor/normalize-for-stream.md
View file

@ -40,6 +40,7 @@ If the document is not OpenTelemetry-compliant, the processor normalizes it as f
| `trace.id` | `trace_id` | | `trace.id` | `trace_id` |
| `message` | `body.text` | | `message` | `body.text` |
| `log.level` | `severity_text` | | `log.level` | `severity_text` |
The processor first looks for the nested form of the ECS field and if such does not exist, it looks for a top-level field with the dotted field name. The processor first looks for the nested form of the ECS field and if such does not exist, it looks for a top-level field with the dotted field name.
* Other specific ECS fields that describe resources and have corresponding counterparts in the OpenTelemetry Semantic Conventions are moved to the `resource.attribtues` map. Fields that are considered resource attributes are such that conform to the following conditions: * Other specific ECS fields that describe resources and have corresponding counterparts in the OpenTelemetry Semantic Conventions are moved to the `resource.attribtues` map. Fields that are considered resource attributes are such that conform to the following conditions:
* They are ECS fields that have corresponding counterparts (either with * They are ECS fields that have corresponding counterparts (either with