[Windows] Sync with winlogbeat module changes#685
Conversation
|
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
💚 Build Succeeded
Expand to view the summary
Build stats
Test stats 🧪
Trends 🧪 |
P1llus
left a comment
There was a problem hiding this comment.
LGTM from my side, some small comments just to make sure if its intended, I looked at the processors, config files and ECS mapping, though I am unable to 100% determine if we have all the ECS fields used by the integration in ecs.yml. Is there ways we test this today?
packages/windows/data_stream/forwarded/agent/stream/winlog.yml.hbs
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
I can't find any refrence in the commit that the variable auditActions was changed to msobjMessageTable, is this resolving an earlier error?
packages/windows/data_stream/forwarded/agent/stream/winlog.yml.hbs
Outdated
Show resolved
Hide resolved
packages/windows/data_stream/security/agent/stream/winlog.yml.hbs
Outdated
Show resolved
Hide resolved
cc9e894 to
989e51a
Compare
What does this PR do?
Syncs the windows integration with the changes in winlogbeat modules from beats.
Checklist