Skip to content

Filebeat cisco/asa and ftd sets event.outcome to a non-conforming value #20253

@adriansr

Description

@adriansr

The shared ingest pipeline sets event.outcome to allow or deny, instead of using one of the values allowed by ECS:

  • failure
  • success
  • unknown

Metadata

Metadata

Assignees

No one assigned

    Labels

    FilebeatFilebeatStalledbughelp wantedIndicates that a maintainer wants help on an issue or pull request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions