Can Auditbeat retrieve username for events on Windows

I looking for a solution to retrieve the username for an Auditbeat event using the file integrity module on Windows.

Is there a way to do it ? I've already tried to use processors (include_fields)

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.