On Fri, Jun 18, 2021 at 8:40 AM Volkan Yazıcı <volkan.yaz...@gmail.com> wrote: > > ECS <https://www.elastic.co/guide/en/ecs/current/ecs-reference.html>, the > default schema shipped with JsonTemplateLayout, is nowadays the de facto > structure for JSON formatted logs. Since Chainsaw will parse logs emitted > mostly from Log4j, it is wise to make it fully compliant with the one we > ship in Log4j. For that, search for EcsLayout.json in the sources. >
Thanks for that - I was looking at the ECS stuff a while ago, but I couldn't really figure out their documentation. For whatever reason, the ECS documentation seems to be very concerned with how to use elastic search, but not with how to actually format the messages to send. -Robert Middleton
