The following Elastic products support ECS out of the box, as of version 7.0:
- Elastic Security Field Reference - a list of ECS fields used in the SIEM app
- Elastic Endpoint Security Server
- Log Monitoring
- Log formatters that support ECS out of the box for various languages can be found here.
- Metrics Monitoring
- Logstash' Elasticsearch output has an ECS compatibility mode