Move the fields not aliased to the top, to promote sanity

elastic · Nov 27, 2018 · 816f3e0 · 816f3e0
1 parent c148869
commit 816f3e0
Show file tree

Hide file tree

Showing 3 changed files with 39 additions and 37 deletions.
diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc
@@ -5933,13 +5933,6 @@ type: alias
 --
 
 
-*`event.action`*::
-+
---
-type: alias
-
---
-
 *`system.auth.ssh.method`*::
 +
 --
@@ -5948,10 +5941,11 @@ The SSH authentication method. Can be one of "password" or "publickey".
 
 --
 
-*`source.ip`*::
+*`system.auth.ssh.signature`*::
 +
 --
-type: alias
+The signature of the client public key.
+
 
 --
 
@@ -5965,18 +5959,24 @@ The client IP from SSH connections that are open and immediately dropped.
 
 --
 
-*`source.port`*::
+*`event.action`*::
 +
 --
 type: alias
 
 --
 
-*`system.auth.ssh.signature`*::
+*`source.ip`*::
 +
 --
-The signature of the client public key.
+type: alias
 
+--
+
+*`source.port`*::
++
+--
+type: alias
 
 --
 
@@ -6081,38 +6081,38 @@ Fields specific to events created by the `useradd` command.
 
 
 
-*`user.name`*::
+*`system.auth.useradd.home`*::
 +
 --
-type: alias
+The home folder for the new user.
 
 --
 
-*`user.id`*::
+*`system.auth.useradd.shell`*::
 +
 --
-type: alias
+The default shell for the new user.
 
 --
 
-*`group.id`*::
+*`user.name`*::
 +
 --
 type: alias
 
 --
 
-*`system.auth.useradd.home`*::
+*`user.id`*::
 +
 --
-The home folder for the new user.
+type: alias
 
 --
 
-*`system.auth.useradd.shell`*::
+*`group.id`*::
 +
 --
-The default shell for the new user.
+type: alias
 
 --