pub const DATA_STREAM_DATASET: &str = "data_stream.dataset";Expand description
The field can contain anything that makes sense to signify the source of the data.
Examples include nginx.access, prometheus, endpoint etc. For data streams that otherwise fit, but that do not have dataset set we use the value “generic” for the dataset value. event.dataset should have the same value as data_stream.dataset.
Beyond the Elasticsearch data stream naming criteria noted above, the dataset value has additional restrictions:
- Must not contain
- - No longer than 100 characters
§Examples
nginx.access