ecs-transform
The ecs-transform transform reads ECS-style JSON ( Events, StartTime, EndTime) and returns legacy dashboard keys such as combined-custom-top-stats and timeline structures for downstream dashboard nodes.
When to use it
Use in ECS ingest or training pipelines where event JSON already matches the ECS export shape and you publish to ui/legacy widgets.
Limitations
- Pipeline-specific: field names and date formats are tied to ECS event layout, not a general JSON mapper.
- Output is v1 facade shape; not
$heat-dataserviceand not fordashboard-v2without further transforms. dashboard_usersin output may be fixed by the processor implementation; confirm access control for your deployment.
Configuration
| Property | Required | Description |
|---|---|---|
dataSourceName | yes | Data source identifier |