点播网络研讨会

Elastic Common Schema: How to Migrate Your Data

主办方

mathieu-martin.jpg
Mathieu Martin

Senior Software Engineer

Elastic

mike-paquette.jpg
Mike Paquette

Director of Product, Security Market

Elastic

亮点

Whether you’re into security analytics, operations analytics, APM, or a different use case altogether, you know that efficient and effective centralized analysis of data from diverse sources requires a common data model to simplify cross-source analysis and correlation.

The Elastic Common Schema (ECS) is an open source specification, developed with support from the Elastic user community. ECS defines a common set of fields to be used when storing event data in Elasticsearch, such as logs and metrics.

You’ve heard about ECS and decided that it makes sense to adopt it. Great! So what’s next? You’re probably wondering how to get your new events transformed into ECS format. You also may want to know what to do with events that have already been indexed in Elasticsearch, but not in ECS format. In this video, we’ll cover all these topics and more.

Highlights:

  • A brief review of ECS concepts and field sets
  • Migrating Beats-generated events to ECS
  • Migrating events generated by other data sources to ECS

Additional Resources:

立即登记观看

你将会收到一封相关内容的电邮。