ruflin

Change meaning of agent.type and service.type

So far service.name was used for things like elasticsearch. APM is putting this information under service.type and service.name is not used yet. .name and .type is also used in other places in ECS. Most of the .name entries are user defined and type is predefined values.

The general suggestion is to make .type the value that will not change over time but .name can. A few examples:

Filebeat Agent reading MySQL logs on production

ruflin

{
  "name" : "ruflin",
  "age" : 5,
  "social" : {
    "github" : "github.com/ruflin",
    "twitter" : "twitter.com/ruflin"
  },
  "kids": ["Linus", "Yuna"],
  "nine": 9.0
}