add result_description field

lucian-ioan · lucian-ioan · commit b52f82f1d6f0 · 2024-04-29T11:44:13.000+03:00
diff --git a/packages/azure/data_stream/auditlogs/fields/fields.yml b/packages/azure/data_stream/auditlogs/fields/fields.yml
@@ -25,6 +25,10 @@
       type: keyword
       description: |
         Result signature
+    - name: result_description
+      type: keyword
+      description: |
+        Result description
     - name: level
       type: float
       description: Value for level.
diff --git a/packages/azure/docs/adlogs.md b/packages/azure/docs/adlogs.md
@@ -1027,6 +1027,7 @@ An example event for `auditlogs` looks as following:
 | azure.auditlogs.properties.target_resources.\*.modified_properties.\*.old_value | Old value | keyword |
 | azure.auditlogs.properties.target_resources.\*.type | Type | keyword |
 | azure.auditlogs.properties.target_resources.\*.user_principal_name | User principal name | keyword |
+| azure.auditlogs.result_description | Result description | keyword |
 | azure.auditlogs.result_signature | Result signature | keyword |
 | azure.auditlogs.tenant_id | Tenant ID | keyword |
 | azure.correlation_id | Correlation ID | keyword |
