renames space ids field on alert documents from kibana.rac.alert.spac…

…e_ids to kibana.space_ids
elastic · Jul 15, 2021 · 0aeb067 · 0aeb067
1 parent 77e8e3e
commit 0aeb067
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/packages/kbn-rule-data-utils/src/technical_field_names.ts b/packages/kbn-rule-data-utils/src/technical_field_names.ts
@@ -8,7 +8,9 @@
 
 import { ValuesType } from 'utility-types';
 
-const ALERT_NAMESPACE = 'kibana.rac.alert';
+const KIBANA_NAMESPACE = 'kibana';
+
+const ALERT_NAMESPACE = `${KIBANA_NAMESPACE}.rac.alert`;
 
 const TIMESTAMP = '@timestamp' as const;
 const EVENT_KIND = 'event.kind' as const;
@@ -28,7 +30,7 @@ const ALERT_DURATION = `${ALERT_NAMESPACE}.duration.us` as const;
 const ALERT_SEVERITY_LEVEL = `${ALERT_NAMESPACE}.severity.level` as const;
 const ALERT_SEVERITY_VALUE = `${ALERT_NAMESPACE}.severity.value` as const;
 const ALERT_STATUS = `${ALERT_NAMESPACE}.status` as const;
-const SPACE_IDS = `${ALERT_NAMESPACE}.space_ids` as const;
+const SPACE_IDS = `${KIBANA_NAMESPACE}.space_ids` as const;
 const ALERT_EVALUATION_THRESHOLD = `${ALERT_NAMESPACE}.evaluation.threshold` as const;
 const ALERT_EVALUATION_VALUE = `${ALERT_NAMESPACE}.evaluation.value` as const;