Skip to Content
This documentation is provided with the HEAT environment and is relevant for this HEAT instance only.

ecs-transform

The ecs-transform transform reads ECS-style JSON ( Events, StartTime, EndTime) and returns legacy dashboard keys such as combined-custom-top-stats and timeline structures for downstream dashboard nodes.

When to use it

Use in ECS ingest or training pipelines where event JSON already matches the ECS export shape and you publish to ui/legacy widgets.

Limitations

  • Pipeline-specific: field names and date formats are tied to ECS event layout, not a general JSON mapper.
  • Output is v1 facade shape; not $heat-dataservice and not for dashboard-v2 without further transforms.
  • dashboard_users in output may be fixed by the processor implementation; confirm access control for your deployment.

Configuration

PropertyRequiredDescription
dataSourceNameyesData source identifier