You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the enhancement: Event ID's 4797, 5379, 5381, and 5382 are not currently parsed in the Winlogbeat 8.x Ingest Pipelines.
Describe a specific use case for the enhancement or feature: These are common Event ID's in our environment, so ensuring proper parsing will help with identifying events based on the event.action field.
The text was updated successfully, but these errors were encountered:
Describe the enhancement: Event ID's 4797, 5379, 5381, and 5382 are not currently parsed in the Winlogbeat 8.x Ingest Pipelines.
Describe a specific use case for the enhancement or feature: These are common Event ID's in our environment, so ensuring proper parsing will help with identifying events based on the
event.action
field.The text was updated successfully, but these errors were encountered: