Auditbeat File Integrity appending random string to file.path


Just noticed that Auditbeat 7.5.2 File Integrity module seems to sometimes append a weird string to the file.path values, for example:



Is this a known issue? I'm not sure how to reproduce.



Hey @willemdh,

If files with these paths don't exist, auditbeat is probably failing to get some extra information. These failures should appear in events and in logs. Do you see any error in auditbeat logs, or in the events containing these paths?
Could you share any of the events with these paths?

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.