You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We are currently using Autonomous System in two places:
IP Details Overview
Timeline Field Renderers
In both cases, the code looks in the autonomous_system.* fields (code references in #43649). However, ECS has now added an as.* field set (elastic/ecs#341, docs) and @andrewkroh has updated a bunch of Filebeat pipelines to use those fields (elastic/beats#13036).
So I think we should change to as.* in the SIEM app as soon as possible.
The text was updated successfully, but these errors were encountered:
We are currently using Autonomous System in two places:
In both cases, the code looks in the
autonomous_system.*
fields (code references in #43649). However, ECS has now added anas.*
field set (elastic/ecs#341, docs) and @andrewkroh has updated a bunch of Filebeat pipelines to use those fields (elastic/beats#13036).So I think we should change to
as.*
in the SIEM app as soon as possible.The text was updated successfully, but these errors were encountered: