Add http.response.* fields

CHANGELOG.md

@@ -9,6 +9,7 @@ All notable changes to this project will be documented in this file based on the
 ### Bugfixes
 
 ### Added
-Adds cloud.account.id for top level organizational level.
+* Adds cloud.account.id for top level organizational level. #11
+* Add `http.response.status_code` and `http.response.body` fields. #4
 
 ### Deprecated

README.md

@@ -32,6 +32,7 @@ List of available ECS fields.
  * [File fields](#file)
  * [Geoip fields](#geoip)
  * [Host fields](#host)
+ * [HTTP fields](#http)
  * [Kubernetes fields](#kubernetes)
  * [Log fields](#log)
  * [Network fields](#network)
@@ -238,6 +239,17 @@ Normally the host information is related to the machine on which the event was g
 | <a name="host.architecture"></a>`host.architecture`  | Operating system architecture.  | keyword  |   | `x86_64`  |
 
 
+## <a name="http"></a> HTTP fields
+
+Fields related to HTTP requests and responses.
+
+
+| Field  | Description  | Type  | Multi Field  | Example  |
+|---|---|---|---|---|
+| <a name="http.response.status_code"></a>`http.response.status_code`  | Http response status code.  | long  |   | `404`  |
+| <a name="http.response.body"></a>`http.response.body`  | The full http response body.  | text  |   | `Hello world`  |
+
+
 ## <a name="kubernetes"></a> Kubernetes fields
 
 Kubernetes fields are used for meta information about k8s. This should help to correlate data coming out of k8s setups.

schema.csv

@@ -79,6 +79,8 @@ host.os.platform,keyword,0,darwin
 host.os.version,keyword,0,10.12.6
 host.timezone.offset.sec,long,1,-5400
 host.type,keyword,1,
+http.response.body,text,0,Hello world
+http.response.status_code,long,0,404
 kubernetes.annotations,object,0,
 kubernetes.container.name,keyword,0,
 kubernetes.labels,object,0,

schemas/http.yml

@@ -0,0 +1,17 @@
+---
+- name: http
+  title: HTTP
+  group: 2
+  description: >
+    Fields related to HTTP requests and responses.
+  fields:
+    - name: response.status_code
+      type: long
+      description: >
+        Http response status code.
+      example: 404
+    - name: response.body
+      type: text
+      description: >
+        The full http response body.
+      example: Hello world

template.json

@@ -400,6 +400,21 @@
             }
           }
         },
+        "http": {
+          "properties": {
+            "response": {
+              "properties": {
+                "body": {
+                  "norms": false,
+                  "type": "text"
+                },
+                "status_code": {
+                  "type": "long"
+                }
+              }
+            }
+          }
+        },
         "kubernetes": {
           "properties": {
             "annotations": {