From b3db6aa74f1d25e06192d24ef66bca27b4abd715 Mon Sep 17 00:00:00 2001
From: Patrick Birch <48594400+patrickbirch@users.noreply.github.com>
Date: Sat, 27 Sep 2025 13:05:40 -0500
Subject: [PATCH] PS-10208 [DOCS] -  audit_log_filter documentation refers to
 non-existing "operation" key in rule definitions 8.4

	modified:   docs/write-filter-definitions.md
---
 docs/write-filter-definitions.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/docs/write-filter-definitions.md b/docs/write-filter-definitions.md
index b11280c99cb..bd78aaf1d5f 100644
--- a/docs/write-filter-definitions.md
+++ b/docs/write-filter-definitions.md
@@ -267,8 +267,10 @@ This filter is useful for monitoring and auditing changes to the database perfor
     "class": [
       {
         "name": "table_access",
-        "user": ["admin"],
-        "operation": ["update", "delete"]
+        "event": [ 
+          { "name": "update"},
+          { "name": "delete"}
+        ]
       }
     ]
   }