RENDER_ECS_DOTNET

Render a LogEvent into JSON to mimic that described in Elastic Common Schema for .NET.

It populates ECS fields as follows:

  • timestamp ->@timestamp

  • host ->host.name

  • logger -> a log object with logger field

  • level ->log.level

  • message (evaluated template) ->message

  • template (if present) ->message_template field in metadata object

  • If stackTrace is present:

  • stackTrace ->error.stack_trace

  • message (evaluated template) ->error.message

  • context (if present) ->context in labels object

  • items (if present) ->metadata (object)