Skip to content

Cherry-pick #15236 to 7.x: User/Group Management Dashboards#16967

Merged
andrewkroh merged 1 commit intoelastic:7.xfrom
andrewkroh:backport_15236_7.x
Mar 13, 2020
Merged

Cherry-pick #15236 to 7.x: User/Group Management Dashboards#16967
andrewkroh merged 1 commit intoelastic:7.xfrom
andrewkroh:backport_15236_7.x

Conversation

@andrewkroh
Copy link
Copy Markdown
Member

@andrewkroh andrewkroh commented Mar 11, 2020

Cherry-pick of PR #15236 to 7.x branch. Original message:

User and Group Management Events Dashboards

Screenshot_2019-12-20  winlogbeat  User Management Events - Kibana
Screenshot_2019-12-20  winlogbeat  Group Management Events - Kibana

Add dashboards to the Winlogbeat Security module for visualizing User Management events
and Group Management events. There are two versions of each dashboard - one with and without TSVB (time series visual builder) visualizations.

This updates the Winlogbeat build to include the dashboards from the module directories.

Add it adds winlog.event_data.MemberName to the fields.yml because it's used in the user
management dashboard and should be in the fields.yml so the dashboards load without error.

Co-authored-by: Andrew Kroh <andrew.kroh@elastic.co>
(cherry picked from commit d866824)
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/siem (Team:SIEM)

Copy link
Copy Markdown
Contributor

@leehinman leehinman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@andrewkroh andrewkroh merged commit aac538e into elastic:7.x Mar 13, 2020
@andrewkroh andrewkroh deleted the backport_15236_7.x branch January 14, 2022 14:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants