Unix Auditd Modeling Rule

Modeling Rule

Auditd

Details

IDunix_auditd_modeling_rule
From Version8.15.0
TagsUnix Auditd

Schema

unix_auditd_raw

Field Type Array?
_raw_log string —

Source

Auditd_2_11.xif Auditd_2_11.yml Auditd_2_11_schema.json
Download History Raw 
{
    "unix_auditd_raw": {
        "_raw_log": {
          "type": "string",
          "is_array": false
        }
    }
  }