From acb2ecb419aeea4155824748430828f8e20d2134 Mon Sep 17 00:00:00 2001 From: Marc Guasch Date: Fri, 12 Feb 2021 17:32:56 +0100 Subject: [PATCH] Fix okta default date in module config (#24025) (cherry picked from commit 2c5886ac3c9991b1e86b2396976f5397be78407c) --- CHANGELOG.next.asciidoc | 1 + x-pack/filebeat/module/okta/system/config/input.yml | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 763ae49e4ad..42c4605ebb3 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -229,6 +229,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d - Fix handling of ModifiedProperties field in Office 365. {pull}23777[23777] - Use rfc6587 framing for fortinet firewall and clientendpoint filesets when transferring over tcp. {pull}23837[23837] - Fix httpjson input logging so it doesn't conflict with ECS. {pull}23972[23972] +- Fix Okta default date formatting. {issue}24018[24018] {pull}24025[24025] *Heartbeat* diff --git a/x-pack/filebeat/module/okta/system/config/input.yml b/x-pack/filebeat/module/okta/system/config/input.yml index 107dd3ca320..be1634d73ae 100644 --- a/x-pack/filebeat/module/okta/system/config/input.yml +++ b/x-pack/filebeat/module/okta/system/config/input.yml @@ -25,7 +25,7 @@ request.transforms: - set: target: url.params.since value: "[[.cursor.published]]" - default: '[[now (parseDuration "-{{.initial_interval}}")]]' + default: '[[formatDate (now (parseDuration "-{{.initial_interval}}")) "RFC3339"]]' response.pagination: - set: