Added missing who data field

wazuh · Jul 30, 2018 · 3a56f9e · 3a56f9e
1 parent d0db566
commit 3a56f9e
Showing 1 changed file with 27 additions and 0 deletions.
diff --git a/server/integration-files/known-fields.js b/server/integration-files/known-fields.js
@@ -1667,6 +1667,33 @@ export default [
         "aggregatable": true,
         "readFromDocValues": true
     },
+    {
+        "name": "syscheck.audit.audit_uid",
+        "type": "string",
+        "count": 0,
+        "scripted": false,
+        "searchable": true,
+        "aggregatable": true,
+        "readFromDocValues": true
+    },
+    {
+        "name": "syscheck.audit.changed_fields",
+        "type": "string",
+        "count": 0,
+        "scripted": false,
+        "searchable": true,
+        "aggregatable": true,
+        "readFromDocValues": true
+    },
+    {
+        "name": "syscheck.audit.audit_name",
+        "type": "string",
+        "count": 0,
+        "scripted": false,
+        "searchable": true,
+        "aggregatable": true,
+        "readFromDocValues": true
+    },
     {
         "name": "syscheck.audit.proccess.name",
         "type": "string",