Eric

This bug has been open for nearly 6 years?! I am running into this same issue. I have a boolean field that does not exist in all events, but I...

Still looking for a solution to this issue. There needs to be a way to test test for the presence of a boolean field. This issue has been open now...

No movement on this? We are only just now starting to test Auditbeat on Mac (we are mainly a Windows and Linux shop).

For us it is mainly authentication events.

Yeah, almost six years later, and no traction.

We have officially passed **_six years_** on this. :-(

I'll see your 15 months and raise you another three months.