From 470ade77eeecdf9daba0a5c76d3329de00a5e084 Mon Sep 17 00:00:00 2001
From: Trent Mick <trent.mick@elastic.co>
Date: Mon, 16 Oct 2023 10:49:26 -0700
Subject: [PATCH] docs: clean up remaining ".log" suffix examples in docs

Back in #63 the guidance was changed to *not* have the .log
suffix on `event.dataset`.
---
 docs/intro.asciidoc | 2 +-
 spec/README.md      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/intro.asciidoc b/docs/intro.asciidoc
index 4002900..b8ad7ec 100644
--- a/docs/intro.asciidoc
+++ b/docs/intro.asciidoc
@@ -197,7 +197,7 @@ Refer to the documentation of the individual loggers on how to set these fields.
 
 |{ecs-ref}/ecs-event.html[`event.dataset`]
 | Enables the {observability-guide}/inspect-log-anomalies.html[log rate anomaly detection].
-|`"my-service.log"`
+|`"my-service"`
 
 |===
 
diff --git a/spec/README.md b/spec/README.md
index 0da22aa..cc075ae 100644
--- a/spec/README.md
+++ b/spec/README.md
@@ -76,7 +76,7 @@ The following example describes a richer set of fields in an event that has not
     "service.name": "opbeans",
     "service.version": "1.2.3",
     "service.environment": "production",
-    "event.dataset": "opbeans.log"
+    "event.dataset": "opbeans"
 }
 ```