https://www.elastic.co/docs/reference/ecs/ecs-vlan
VLAN fields | Elastic Common Schema (ECS)
The VLAN fields are used to identify 802.1q tag(s) of a packet, as well as ingress and egress VLAN associations of an observer in relation to a specific...
elastic common schemavlan fieldsecs