Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cisco Filebeat module event.outcome normalization non-conformant to ECS #20760

Closed
A-Hall opened this issue Aug 24, 2020 · 1 comment
Closed

Comments

@A-Hall
Copy link
Member

A-Hall commented Aug 24, 2020

For confirmed bugs, please report:

  • Version: 7.9

Allowed values for ECS 1.5 are:

  • failure
  • success
  • unknown

It appears the module will normalize these fields to allow or deny.

@A-Hall A-Hall changed the title Cisco Filebeat module event.outcome non-conformant to ECS causing lost values Cisco Filebeat module event.outcome normalization non-conformant to ECS Aug 24, 2020
@botelastic
Copy link

botelastic bot commented Jul 25, 2021

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@botelastic botelastic bot added the Stalled label Jul 25, 2021
@botelastic botelastic bot closed this as completed Aug 24, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant