Fix wef_audit_windows.events.conf

Cargill · Mar 8, 2024 · 63aa854 · 63aa854
1 parent b491b1b
commit 63aa854
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/config/processors/wef_audit_windows.events.conf b/config/processors/wef_audit_windows.events.conf
@@ -32,9 +32,9 @@ filter {
     rename => {"[winlog][event_data][OriginalFileName]" => "[file][path]"}
     rename => {"[winlog][event_data][Path]" => "[file][path]"}
     rename => {"[winlog][event_data][ShareLocalPath]" => "[file][target_path]"}
-    rename => {"[winlog][event_data][ShareName]" => "[file][sharename]"
-    rename => {"[winlog][event_data][NewSD]" => "[file][new_acl]"
-    rename => {"[winlog][event_data][OldSD]" => "[file][old_acl]"
+    rename => {"[winlog][event_data][ShareName]" => "[file][sharename]"}
+    rename => {"[winlog][event_data][NewSD]" => "[file][new_acl]"}
+    rename => {"[winlog][event_data][OldSD]" => "[file][old_acl]"}
     rename => {"[winlog][event_data][ObjectName]" => "[file][path]"}
     rename => { "[winlog][event_data][ServiceFileName]" => "[file][path]" }
     # Process fields