Fede Galland 3e58e4188a
Remove ECS fields from gcp's custom fields definition (#675)
* Remove clour.instance.name, service.type and dns.answers from gcp's custom fields definition

* Update the Wazuh Common Schema

* Update CHANGELOG.md

* Update push_schema.sh to commit everything under the docs/ folder

* Update the Wazuh Common Schema

---------

Co-authored-by: Wazuh Indexer Bot <github_devel_xdrsiem_indexer@wazuh.com>
Co-authored-by: Alex Ruiz <alejandro.ruiz.becerra@wazuh.com>
2025-12-01 16:46:38 +01:00
..
2025-10-31 17:30:09 +01:00

Wazuh Common Schema

Overview

The Wazuh Common Schema is a derivation of the Elastic Common Schema (ECS) providing a common data schema for the different central components of Wazuh.

The Wazuh Common Schema is structured in modules. For a detailed list of the available fields in a module and their description, please refer to the docs/ folder of the module. For example, states-inventory-packages.

References

Developer guide

Refer to the WCS generator documentation for details on how to generate and update the Wazuh Common Schema.