Skip to content

auditd using invalid field values according to ECS #3043

@jsoriano

Description

@jsoriano

[0] parsing field value failed: field "event.outcome"'s value "1" is not one of the allowed values (failure, success, unknown) "1" => "success"

Part of #3016

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions