Area(s)

area:os

Is your change request related to a problem? Please describe.

I want to easily see all my logs from linux machines, just like i can with ECS.

Describe the solution you'd like

Capturing of the

• distro ie centos
• Foundational distro ie RHEL
• type ie Unix

Latest thoughts

• os.platform as defined in https://learn.microsoft.com/en-us/dotnet/api/system.operatingsystem.platform?view=net-8.0#system-operatingsystem-platform
• os.family for Windows, macosx, centos, freebsd as per ecs and sourced from LIKE_ID
• os.type to match ecs with additional types covered by refocus os.type #1257
• os.classification to match Foundational distro ie RHEL, darwin

Solution needs to work for a broad range of os

Describe alternatives you've considered

No response

Additional context

https://www.elastic.co/guide/en/ecs/current/ecs-os.html