File tree Expand file tree Collapse file tree
x-pack/legacy/plugins/siem/server/lib/kpi_hosts Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -356,15 +356,15 @@ export const mockKpiHostDetailsUniqueIpsQuery = [
356356] ;
357357
358358const mockAuthAggs = {
359- authentication_success : { filter : { term : { 'event.type ' : 'authentication_success ' } } } ,
359+ authentication_success : { filter : { term : { 'event.outcome ' : 'success ' } } } ,
360360 authentication_success_histogram : {
361361 auto_date_histogram : { field : '@timestamp' , buckets : '6' } ,
362- aggs : { count : { filter : { term : { 'event.type ' : 'authentication_success ' } } } } ,
362+ aggs : { count : { filter : { term : { 'event.outcome ' : 'success ' } } } } ,
363363 } ,
364- authentication_failure : { filter : { term : { 'event.type ' : 'authentication_failure ' } } } ,
364+ authentication_failure : { filter : { term : { 'event.outcome ' : 'failure ' } } } ,
365365 authentication_failure_histogram : {
366366 auto_date_histogram : { field : '@timestamp' , buckets : '6' } ,
367- aggs : { count : { filter : { term : { 'event.type ' : 'authentication_failure ' } } } } ,
367+ aggs : { count : { filter : { term : { 'event.outcome ' : 'failure ' } } } } ,
368368 } ,
369369} ;
370370
You can’t perform that action at this time.
0 commit comments