-
Notifications
You must be signed in to change notification settings - Fork 528
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add system network fields #5436
Merged
Merged
Changes from 9 commits
Commits
Show all changes
10 commits
Select commit
Hold shift + click to select a range
b58556b
add system network fields
jalvz 010925b
code review
jalvz 01c456a
Update model/system_test.go
jalvz c2add24
Update processor/otel/metadata.go
jalvz f9433e7
liiiiint
jalvz d69e467
add changelog
jalvz d36f30f
Merge branch 'master' into mobile-fields
jalvz 6145741
Merge branch 'master' into mobile-fields
jalvz d0d5b06
Merge branch 'master' into mobile-fields
jalvz 8a24fa5
Merge branch 'master' into mobile-fields
jalvz File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am not certain about the naming. ECS has a definition for
network
and one forhost
with somehost.network
fields. None of them contain what we need. This PR introducesnetwork.carrier.*
fields, that are not (yet) in ECS, but also not aligned with the otel proposalnet.host.carrier.*
.@jalvz did you have a conversation with the ECS folks where they would see these fields fit in? I am a bit worried to just remove the
host
part, that is in the otel proposal.There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have already a top level
host
field, I didn't think it would make much sense to duplicate the field insidenetwork
to refer to the same host?network
is already defined as top level field in ECS (https://www.elastic.co/guide/en/ecs/current/ecs-network.html),I sort of followed #491, btw.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ECS says (about the network fieldset):
Seems to me it makes sense to go under
network
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
So let me ask:
host
andnetwork.host
would refer to the same host, or different ones?network
definition that dictates there should be ahost
field insidenetwork
? (sorry I can't see that in the quote)network.host
, why don't we apply the same reasoning elsewhere? Eg., aprocess
normally runs on ahost
, yet there is noprocess.host
; rather 2 top fields (conceptually related).network.host
, how do you justify that in the context of other fields? We could have eg.network.host.connection_type="wifi"
andnetwork.name="Guest wifi"
- whyconnection_type
andname
would not be at the same level?network.host.carrier
?: ahost
has acarrier
? acarrier
runs on ahost
?...There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
After some offline discussion,
network.carrier.*
is where the new fields fit best related to ECS, andnet.host.carrier.*
was the prefered nesting in the open-telemetry proposal; so 👍 on the changes.