go-libaudit icon indicating copy to clipboard operation
go-libaudit copied to clipboard

Published 20 hours ago • verified publisher icon elastic

Correct SERVICE_STOP, DAEMON_ABORT, DAEMON_END event.type ECS normalization

Open renini opened this issue 1 year ago • 2 comments

The event.type: stop is not ECS compliant, event.type: end is.

Modified 'stop' to 'end' for the following audit events:

  • SERVICE_STOP
  • DAEMON_ABORT
  • DAEMON_END

renini avatar Jun 26 '24 17:06 renini