https://www.elastic.co/docs/reference/ecs/ecs-risk
Risk information fields | Elastic Common Schema (ECS)
Fields for describing risk score and risk level of entities such as hosts and users. These fields are not allowed to be nested under event.*. Please continue...
risk information fieldselastic common schemaecs