From 0b5371fe1c6409df3b4164b7a3a48878de3fd91e Mon Sep 17 00:00:00 2001
From: Andrew Kroh <andrew.kroh@elastic.co>
Date: Thu, 7 Nov 2024 15:19:11 -0500
Subject: [PATCH] Add changelog

---
 CHANGELOG.next.asciidoc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
index 684860cf64b7..8b2e6b1bad3d 100644
--- a/CHANGELOG.next.asciidoc
+++ b/CHANGELOG.next.asciidoc
@@ -114,7 +114,9 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
 
 *Auditbeat*
 
-- Request status from a separate socket to avoid data congestion {pull}41207[41207]
+- auditd: Request status from a separate socket to avoid data congestion {pull}41207[41207]
+- auditd: Use ECS `event.type: end` instead of `stop` for SERVICE_STOP, DAEMON_ABORT, and DAEMON_END messages.
+- auditd: Update syscall names for Linux 6.11.
 
 *Filebeat*