Add back missing log entry, likely lost during rebase

elastic · Nov 27, 2018 · 4cc3167 · 4cc3167
1 parent c789b17
commit 4cc3167
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/filebeat/module/system/auth/test/test.log-expected.json b/filebeat/module/system/auth/test/test.log-expected.json
@@ -115,6 +115,17 @@
         "system.auth.sudo.user": "root", 
         "user.name": "tsg"
     }, 
+    {
+        "@timestamp": "2018-02-22T11:47:05.000Z", 
+        "event.dataset": "auth", 
+        "event.module": "system", 
+        "host.hostname": "localhost", 
+        "input.type": "log", 
+        "log.offset": 861, 
+        "process.pid": 6991, 
+        "system.auth.groupadd.gid": 48, 
+        "system.auth.groupadd.name": "apache"
+    }, 
     {
         "@timestamp": "2018-02-22T11:47:05.000Z", 
         "event.dataset": "auth",