ECS remapping:
- 'host' => '[@metadata][input][beats][host][name]' if 'add_hostname' is true
- '@metadata.ip_address' => '[@metadata][input][beats][host][ip]'
- '@metadata.tls_peer.protocol' => '[@metadata][input][beats][tls][version_protocol]'
- '@metadata.tls_peer.subject' => '[@metadata][input][beats][tls][client][subject]'
- '@metadata.tls_peer.cipher_suite' => '[@metadata][input][beats][tls][cipher]'
Warn:
'@metadata.tls_peer.status' is not remapped becuase there isn't a 1:1 mapping in ECS concepts
Co-authored-by: Karen Metts <[email protected]>
Fix #387
