Remove colliding fields from filebeat

leweafan · Feb 1, 2021 · 5e56254 · 5e56254
1 parent f067eca
commit 5e56254
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 69 deletions.
diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc
@@ -523,54 +523,6 @@ type: keyword
 Name of the group.
 
 
-type: keyword
-
---
-
-[float]
-=== effective
-
-Effective user information.
-
-
-*`user.effective.id`*::
-+
---
-Effective user ID.
-
-type: keyword
-
---
-
-*`user.effective.name`*::
-+
---
-Effective user name.
-
-type: keyword
-
---
-
-[float]
-=== group
-
-Effective group information.
-
-
-*`user.effective.group.id`*::
-+
---
-Effective group ID.
-
-type: keyword
-
---
-
-*`user.effective.group.name`*::
-+
---
-Effective group name.
-
 type: keyword
 
 --

diff --git a/filebeat/module/auditd/_meta/fields.yml b/filebeat/module/auditd/_meta/fields.yml
@@ -36,26 +36,6 @@
               description: >
                     Name of the group.
 
-        - name: effective
-          type: group
-          description: Effective user information.
-          fields:
-          - name: id
-            type: keyword
-            description: Effective user ID.
-          - name: name
-            type: keyword
-            description: Effective user name.
-          - name: group
-            type: group
-            description: Effective group information.
-            fields:
-            - name: id
-              type: keyword
-              description: Effective group ID.
-            - name: name
-              type: keyword
-              description: Effective group name.
 
         - name: filesystem
           type: group

diff --git a/filebeat/module/auditd/fields.go b/filebeat/module/auditd/fields.go