Does OpenSearch support the Elastic Common Schema (ECS) standard?

General Feedback
1

Hi,

The OpenSearch documentation mentions support for the ECS standard.
But I did not find any specific instructions on how to use this standard.
For example, use index templates and pipelines from the Filebeat distribution.
Due to the differences between OpenSearch and Elasticsearch, they cannot be used directly.
Is it described anywhere how to use them?

Kind Regards
Sandy

2

It doesn’t fully, some parts are still missing. I have asked for the match_text handler to be implemented, which was one of the larger missing pieces. Other stuff should be supported as well imho, you could create github issues for these. I would be thankful :slight_smile: