Version: 7.12.0 (it was also in 7.10.1, did not test any other versions)
Steps to Reproduce
- install and setup filebeat
- navigate to Dashboard -> [Filebeat GCP] Audit
- One of the visualizations will show an error:
Could not locate that index-pattern-field (id: gcp.audit.resource_name)

Steps to quickly fix it
- Inspect the visualization saved object (Audit Resource Name [Filebeat GCP])
- Update the visState to use
googlecloud.audit.resource_name instead of gcp.audit.resource_name
I think the issue is related to the rename that happened here
Version: 7.12.0 (it was also in 7.10.1, did not test any other versions)
Steps to Reproduce
Steps to quickly fix it
googlecloud.audit.resource_nameinstead ofgcp.audit.resource_nameI think the issue is related to the rename that happened here