Convert Filebeat iis.error to ECS and add IPv6 zone support for IIS access logs#9955

Merged

webmat merged 10 commits intoelastic:masterfrom webmat:ecs-iis-error-fb

Jan 11, 2019

+323-197

Commits on Jan 11, 2019

Translate almost all fields to ECS at once. Also coerce some int fields
Mathieu Martin
committed
Alias the fields in the template
Mathieu Martin
committed
Document the iis.error aliases in ecs-migration.yml
Mathieu Martin
committed
Add support for Microsoft IPv6 zone by using the .address field
Mathieu Martin
committed
Adjust iis.access ip aliases to .address
Mathieu Martin
committed
Changelog
Mathieu Martin
committed
Rename iis.access' read_timestamp to event.created, like under iis.error
Mathieu Martin
committed
Update iis-7.5 log for the dual .address and .ip fields
Mathieu Martin
committed
Identify this PR as the source of the fix for the IPv6 zone ID bug as well.
Mathieu Martin
committed
Rebase inexplicably removed some indentation in changelog, adding it back
Mathieu Martin
committed