ECS::LogEntry::Ecs
Inherits JSON::Serializable < Struct < Value < Object
Constructors
new(pull : JSON::PullParser)
Sourcenew(*, __pull_for_json_serializable pull : JSON::PullParser)
SourceInstance methods
version
ecs.version
ECS version this event conforms to. ecs.version is a required field and must
exist in all events.
When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.
Level: Core Type: Keyword Example:
1.0.0
version=(version : String | Nil)
ecs.version
ECS version this event conforms to. ecs.version is a required field and must
exist in all events.
When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.
Level: Core Type: Keyword Example:
1.0.0