wazuh-indexer-plugins/fields.csv at d7b49f8421638e4aa54c7ead27a68abc26eb2e0c

mirror of https://github.com/wazuh/wazuh-indexer-plugins.git synced 2025-12-11 10:40:46 -06:00

* Add state.modified_at to stateful indexes

* Apply changes from code review

* Update CHANGELOG.md

2025-09-01 08:23:52 +02:00

1	ECS_Version	Indexed	Field_Set	Field	Type	Level	Normalization	Example	Description
2	8.11.0	true	agent	agent.host.architecture	keyword	core		x86_64	Operating system architecture.
3	8.11.0	true	agent	agent.host.ip	ip	core	array		Host ip addresses.
4	8.11.0	true	agent	agent.id	keyword	core		8a4f500d	Unique identifier of this agent.
5	8.11.0	true	agent	agent.name	keyword	core		foo	Custom name of the agent.
6	8.11.0	true	agent	agent.version	keyword	core		6.0.0-rc2	Version of the agent.
7	8.11.0	true	checksum	checksum.hash.sha1	keyword	custom			SHA1 hash used as checksum of the data collected by the agent.
8	8.11.0	true	interface	interface.name	keyword	extended		eth0	Interface name
9	8.11.0	true	network	network.dhcp	boolean	custom			DHCP enabled
10	8.11.0	true	network	network.gateway	ip	custom			Gateway address
11	8.11.0	true	network	network.metric	long	custom			Metric of the network protocol
12	8.11.0	true	network	network.type	keyword	core		ipv4	In the OSI Model this would be the Network Layer. ipv4, ipv6, ipsec, pim, etc
13	8.11.0	true	state	state.modified_at	date	custom			Date/time when the state was last modified.
14	8.11.0	true	wazuh	wazuh.cluster.name	keyword	custom			Wazuh cluster name.
15	8.11.0	true	wazuh	wazuh.cluster.node	keyword	custom			Wazuh cluster node name.
16	8.11.0	true	wazuh	wazuh.schema.version	keyword	custom			Wazuh schema version.