-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
document how decode_xml_wineventlog maps fields #32456
Conversation
3260f7a
to
0486f79
Compare
This pull request is now in conflicts. Could you fix it? 🙏
|
0486f79
to
db80c45
Compare
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
This pull request is now in conflicts. Could you fix it? 🙏
|
db80c45
to
5817c88
Compare
What does this PR do?
Documents the field mappings for the
decode_xml_wineventlog
processor.Why is it important?
Needed so users will know what fields will be populated so they can filter on them in Conditionals or Logstash.
Checklist
- [ ] My code follows the style guidelines of this project- [ ] I have commented my code, particularly in hard-to-understand areas- [ ] I have made corresponding change to the default configuration files- [ ] I have added tests that prove my fix is effective or that my feature worksCHANGELOG.next.asciidoc
orCHANGELOG-developer.next.asciidoc
.Screenshots