There is a default mapping / suggestion of field name for log data called ECS. We should add links to some useful documentation about it: - https://fbaligand.github.io/ecs/ - https://www.elastic.co/guide/en/ecs/current/index.html