Auditbeat - Retrieve account of the user that performed the action

Elastic Stack Beats
1

Hello everybody!. I would like to know if there's a way in Auditbeat to retrieve the username that performed the action on the file.

So far you can get the file owner, but there's no information about who performed that action on the given file.

Thank you!.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.