I am using audit beat version 7.4
in audit beat logs field user.audit.name is not coming.
Can anyone explain what might be the cause of it?
@andrewkroh Can you help here what might be the possible reasons for it.
is this something dependent on the OS version?
Currently, I am testing it on amazon-linux -2
Can anyone tell me which audit rule is responsible for this ?
Guys I am also facing the same problem.
Any update on this ?
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.