⚠️ Outdated Version: You are viewing ECS version 8.17, which is outdated. View the latest version (9.0)
ECS Version:
Data Stream
The data_stream fields take part in defining the new data stream naming scheme.
Fields
Field Summary
| Field | Type | Level | Description |
|---|---|---|---|
data_stream.dataset | constant_keyword | Extended | The field can contain anything that makes sense to signify the source of the data. |
data_stream.namespace | constant_keyword | Extended | A user defined namespace. Namespaces are useful to allow grouping of data. |
data_stream.type | constant_keyword | Extended | An overarching type for the data stream. |
Field Details
data_stream.dataset
Type: constant_keyword
Level: Extended
Description: The field can contain anything that makes sense to signify the source of the data.
Example: nginx.access
Indexed: true
data_stream.namespace
Type: constant_keyword
Level: Extended
Description: A user defined namespace. Namespaces are useful to allow grouping of data.
Example: production
Indexed: true
data_stream.type
Type: constant_keyword
Level: Extended
Description: An overarching type for the data stream.
Example: logs
Indexed: true