Time host.hostname user.name event.outcome message Jul 31, 2020 @ 23:27:13.465 - mainalih - Logout by user mainalih (UID: 832203832) on pts/1 (PID: 17481) from 1x.2xx.xx.xx (IP: 1x.2xx.xx.xx) Jul 31, 2020 @ 23:27:13.465 - mainalih - Logout by user mainalih (UID: 832203832) on pts/1 (PID: 1…

Each login/logout and failure event is populated 14 times in auditbeat index / dashboard

system (system) Closed August 28, 2020, 9:08pm 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Multiple events from system module login dataset Beats auditbeat	2	442	May 29, 2019
Duplicate audit logs for successful logins in auditbeat Beats auditbeat	7	2044	May 30, 2019
Auditbeat authentications log Beats auditbeat	1	331	September 7, 2023
Event.dataset: login not present Beats auditbeat	1	441	January 5, 2022
Best Beats for Security Analytics and login checks Beats	2	284	June 29, 2018