Skip to content

Instantly share code, notes, and snippets.

@sorenlouv
Last active January 14, 2026 14:36
Show Gist options
  • Select an option

  • Save sorenlouv/5ed2a53c3a43504c0fea7a7a992d18af to your computer and use it in GitHub Desktop.

Select an option

Save sorenlouv/5ed2a53c3a43504c0fea7a7a992d18af to your computer and use it in GitHub Desktop.
Elasticsearch ECS to OTel aliases

This overview was extracted from https://github.com/elastic/elasticsearch/tree/main/x-pack/plugin/otel-data/src/main/resources/component-templates

From otel@mappings.yaml

Alias Field Points To
event.dataset data_stream.dataset

From logs-otel@mappings.yaml

Alias Field Points To
log.level severity_text
message body.text
trace.id trace_id
span.id span_id
error.exception.type attributes.exception.type
error.exception.message attributes.exception.message
error.stack_trace attributes.exception.stacktrace

From traces-otel@mappings.yaml

Alias Field Points To
trace.id trace_id
span.id span_id
parent.id parent_span_id
span.name name

From semconv-resource-to-ecs@mappings.yaml

Alias Field (ECS/Kibana) Points To (OTel SemConv)
service.node.name resource.attributes.service.instance.id
service.environment resource.attributes.deployment.environment
cloud.service.name resource.attributes.cloud.platform
container.image.tag resource.attributes.container.image.tags
host.architecture resource.attributes.host.arch
process.executable resource.attributes.process.executable.path
service.runtime.name resource.attributes.process.runtime.name
service.runtime.version resource.attributes.process.runtime.version
host.os.name resource.attributes.os.name
host.os.platform resource.attributes.os.type
host.os.full resource.attributes.os.description
host.os.version resource.attributes.os.version
orchestrator.cluster.name resource.attributes.k8s.cluster.name
kubernetes.deployment.name resource.attributes.k8s.deployment.name
kubernetes.namespace resource.attributes.k8s.namespace.name
kubernetes.node.name resource.attributes.k8s.node.name
kubernetes.pod.name resource.attributes.k8s.pod.name
kubernetes.pod.uid resource.attributes.k8s.pod.uid
kubernetes.container.name resource.attributes.k8s.container.name
kubernetes.cronjob.name resource.attributes.k8s.cronjob.name
kubernetes.job.name resource.attributes.k8s.job.name
kubernetes.statefulset.name resource.attributes.k8s.statefulset.name
kubernetes.daemonset.name resource.attributes.k8s.daemonset.name
kubernetes.replicaset.name resource.attributes.k8s.replicaset.name
kubernetes.node.uid resource.attributes.k8s.node.uid
kubernetes.node.hostname resource.attributes.k8s.node.hostname
service.language.name resource.attributes.telemetry.sdk.language
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment