Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cherry-pick #19659 to 7.x: Modified auditd ingest pipeline to handle node=hostname format #20526

Merged
merged 2 commits into from
Aug 11, 2020
Merged

Cherry-pick #19659 to 7.x: Modified auditd ingest pipeline to handle node=hostname format #20526

merged 2 commits into from
Aug 11, 2020

Commits on Aug 10, 2020

  1. Modified auditd ingest pipeline to handle node=hostname (elastic#19659) 

    This change permits auditd logs to be ingested whether or not they begin with a node=. Previous to this change a type= was expected.

It handles the case where name_format (man 5 auditd.conf) is a value other than none.

Also adding 10 lines of resulting audit log with name_format = hostname parameter on CentOS 7.

Co-authored-by: Marc Guasch <marc.guasch@elastic.co>
(cherry picked from commit b48be52)
    @ipnerds @andrewkroh
    ipnerds authored and andrewkroh committed Aug 10, 2020
    Configuration menu
    Copy the full SHA
    8db7a15 View commit details
    Browse the repository at this point in the history

Commits on Aug 11, 2020

  1. Update CHANGELOG.next.asciidoc

    @andrewkroh
    andrewkroh committed Aug 11, 2020
    Configuration menu
    Copy the full SHA
    e7dbc1a View commit details
    Browse the repository at this point in the history