diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index e0b88067f469..d4b8ed1ab20d 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -58,6 +58,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d - Make use of secure port when accessing Kubelet API {pull}16063[16063] - Add Tomcat overview dashboard {pull}14026[14026] - Move service config under metrics and simplify metric types. {pull}18691[18691] +- Fix ECS compliance of user.id field in system/users metricset {pull}19019[19019] *Packetbeat* diff --git a/metricbeat/module/system/users/_meta/data.json b/metricbeat/module/system/users/_meta/data.json index 5b96b10ba811..9db1f432d147 100644 --- a/metricbeat/module/system/users/_meta/data.json +++ b/metricbeat/module/system/users/_meta/data.json @@ -33,7 +33,7 @@ } }, "user": { - "id": 1000, + "id": "1000", "name": "alexk" } } \ No newline at end of file diff --git a/metricbeat/module/system/users/users.go b/metricbeat/module/system/users/users.go index ff6ad38fa700..11064c67eb0b 100644 --- a/metricbeat/module/system/users/users.go +++ b/metricbeat/module/system/users/users.go @@ -21,6 +21,7 @@ package users import ( "net" + "strconv" "github.com/godbus/dbus" "github.com/pkg/errors" @@ -107,7 +108,7 @@ func eventMapping(conn *dbus.Conn, sessions []loginSession, report mb.ReporterV2 }, "user": common.MapStr{ "name": session.User, - "id": session.UID, + "id": strconv.Itoa(int(session.UID)), }, }