[WIP] Clarify capabilities of the Filebeat auditd module (#17068) (#1…

…8886) * Update filebeat/docs/modules/auditd.asciidoc Update `filebeat/docs/modules/auditd.asciidoc` - Add note regarding capabilities of the Filebeat auditd module * Edit text and run make update * Run make update again Co-authored-by: DeDe Morton <[email protected]> Co-authored-by: Rob Waight <[email protected]>
elastic · Jun 2, 2020 · bc4b3c0 · bc4b3c0
1 parent 3c4b000
commit bc4b3c0
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/filebeat/docs/modules/auditd.asciidoc b/filebeat/docs/modules/auditd.asciidoc
@@ -11,6 +11,10 @@ This file is generated! See scripts/docs_collector.py
 The +{modulename}+ module collects and parses logs from the audit daemon
 (`auditd`).
 
+NOTE: Although {beatname_uc} is able to parse logs by using the `auditd` module,
+{auditbeat-ref}/auditbeat-module-auditd.html[{auditbeat}] offers more advanced
+features for monitoring audit logs.
+
 include::../include/what-happens.asciidoc[]
 
 include::../include/gs-link.asciidoc[]

diff --git a/filebeat/module/auditd/_meta/docs.asciidoc b/filebeat/module/auditd/_meta/docs.asciidoc
@@ -6,6 +6,10 @@
 The +{modulename}+ module collects and parses logs from the audit daemon
 (`auditd`).
 
+NOTE: Although {beatname_uc} is able to parse logs by using the `auditd` module,
+{auditbeat-ref}/auditbeat-module-auditd.html[{auditbeat}] offers more advanced
+features for monitoring audit logs.
+
 include::../include/what-happens.asciidoc[]
 
 include::../include/gs-link.asciidoc[]