Auditbeat File Integrity appending random string to file.path

Elastic Stack Beats
1

Hello,

Just noticed that Auditbeat 7.5.2 File Integrity module seems to sometimes append a weird string to the file.path values, for example:

image

image

Is this a known issue? I'm not sure how to reproduce.

Grtz

Willem

2

Hey @willemdh,

If files with these paths don't exist, auditbeat is probably failing to get some extra information. These failures should appear in events and in logs. Do you see any error in auditbeat logs, or in the events containing these paths?
Could you share any of the events with these paths?

3

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.