Skip to content

Commit

Permalink
Cherry-pick #23673 to 7.11: Swap ECS 1.7 experimental schema with non…
Browse files Browse the repository at this point in the history
…-experimental to revert wildcard changes (#23699)

* Swap ECS 1.7 experimental schema with non-experimental to revert wildcard changes (#23673)

* Swap ECS 1.7 experimental schema with non-experimental to revert wildcard changes

* Add back in user.effective.* fields to auditd integrations due to no longer using experimental schema

(cherry picked from commit 0f50eb7)

* Add potential workaround using GIT_BASE_COMMIT

* Pin generator to origin/7.11
  • Loading branch information
Andrew Stucki authored Jan 26, 2021
1 parent 3577861 commit 3f44e4c
Show file tree
Hide file tree
Showing 21 changed files with 1,154 additions and 3,840 deletions.
21 changes: 21 additions & 0 deletions auditbeat/_meta/fields.common.yml
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,27 @@
type: keyword
description: Audit user name.

- name: effective
type: group
description: Effective user information.
fields:
- name: id
type: keyword
description: Effective user ID.
- name: name
type: keyword
description: Effective user name.
- name: group
type: group
description: Effective group information.
fields:
- name: id
type: keyword
description: Effective group ID.
- name: name
type: keyword
description: Effective group name.

- name: filesystem
type: group
description: Filesystem user information.
Expand Down
Loading

0 comments on commit 3f44e4c

Please sign in to comment.