all modules generated data

elastic · May 13, 2021 · a018262 · a018262
1 parent ffd2a18
commit a018262
Show file tree

Hide file tree

Showing 244 changed files with 17,852 additions and 17,852 deletions.
diff --git a/filebeat/module/nginx/ingress_controller/test/test.log-expected.json b/filebeat/module/nginx/ingress_controller/test/test.log-expected.json
@@ -1432,8 +1432,8 @@
         "nginx.ingress_controller.upstream.port": 8080,
         "nginx.ingress_controller.upstream.response.length": 100,
         "nginx.ingress_controller.upstream.response.length_list": [
-            "61",
-            "100"
+            "100",
+            "61"
         ],
         "nginx.ingress_controller.upstream.response.status_code": 203,
         "nginx.ingress_controller.upstream.response.status_code_list": [
@@ -1442,8 +1442,8 @@
         ],
         "nginx.ingress_controller.upstream.response.time": 0.104,
         "nginx.ingress_controller.upstream.response.time_list": [
-            "0.100",
-            "0.004"
+            "0.004",
+            "0.100"
         ],
         "nginx.ingress_controller.upstream_address_list": [
             "172.17.0.6:8080",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/add-user-to-group-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/add-user-to-group-json.log-expected.json
@@ -23,8 +23,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "group",
-            "change"
+            "change",
+            "group"
         ],
         "fileset.name": "cloudtrail",
         "group.name": "admin",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/assume-role-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/assume-role-json.log-expected.json
@@ -8,18 +8,18 @@
         "aws.cloudtrail.flattened.request_parameters.roleArn": "arn:aws:iam::111111111111:role/JohnRole2",
         "aws.cloudtrail.flattened.request_parameters.roleSessionName": "Role2WithTags",
         "aws.cloudtrail.flattened.request_parameters.tags": [
-            {
-                "key": "Email",
-                "value": "johndoe@example.com"
-            },
             {
                 "key": "CostCenter",
                 "value": "12345"
+            },
+            {
+                "key": "Email",
+                "value": "johndoe@example.com"
             }
         ],
         "aws.cloudtrail.flattened.request_parameters.transitiveTagKeys": [
-            "Email",
-            "CostCenter"
+            "CostCenter",
+            "Email"
         ],
         "aws.cloudtrail.flattened.response_elements.assumedRoleUser.arn": "arn:aws:sts::111111111111:assumed-role/test-role/Role2WithTags",
         "aws.cloudtrail.flattened.response_elements.assumedRoleUser.assumedRoleId": "AROAIFR7WHDTSOYQYHFUE:Role2WithTags",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/change-password-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/change-password-json.log-expected.json
@@ -23,8 +23,8 @@
         "event.outcome": "failure",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",
@@ -67,8 +67,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/cloudtrail-digest-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/cloudtrail-digest-json.log-expected.json
@@ -5,35 +5,35 @@
         "aws.cloudtrail.digest.log_files": [
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "420784a5bbc12e9ac442451e8ec1356744fdeabf4fee0d2222508db6d448139c",
-                "newestEventTime": "2020-09-11T19:26:24Z",
-                "oldestEventTime": "2020-09-11T19:26:24Z",
+                "hashValue": "2695aeb3b4c1f021fe76e0b36f5ac15e557c41c58af6eef282d77ef056210d70",
+                "newestEventTime": "2020-09-11T18:32:04Z",
+                "oldestEventTime": "2020-09-11T18:32:04Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1930Z_l2pGqVS53QcGdAkp.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1835Z_OPJhVNodH1gY760s.json.gz"
             },
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "4e1eb2a8b41d032cbb16e5449fc8f3eac304e7d43017a391b37c788c77336196",
-                "newestEventTime": "2020-09-11T19:11:18Z",
-                "oldestEventTime": "2020-09-11T19:11:18Z",
+                "hashValue": "9044f9a05d70688bc6f6048d5f8d00764ab65e132b8ffefb193b22ca4394d771",
+                "newestEventTime": "2020-09-11T18:37:10Z",
+                "oldestEventTime": "2020-09-11T18:37:10Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1915Z_TIKlbLnJ6IwUxqxw.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1840Z_btJydJ2t7hCRnjsN.json.gz"
             },
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "2695aeb3b4c1f021fe76e0b36f5ac15e557c41c58af6eef282d77ef056210d70",
-                "newestEventTime": "2020-09-11T18:32:04Z",
-                "oldestEventTime": "2020-09-11T18:32:04Z",
+                "hashValue": "94f09d2398632c7b0c0066ed5d56768632dd2e06ed9c80af9d0c2c5f59bd60b6",
+                "newestEventTime": "2020-09-11T18:41:58Z",
+                "oldestEventTime": "2020-09-11T18:41:58Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1835Z_OPJhVNodH1gY760s.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1845Z_TSDKyASOn2ejOq5n.json.gz"
             },
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "45a2906f55cbfc912584e9425f8d3d8d6fabf571a45a5ecd7d2a0f4132b81689",
-                "newestEventTime": "2020-09-11T19:21:28Z",
-                "oldestEventTime": "2020-09-11T19:21:28Z",
+                "hashValue": "18650414e79e084dff02da66253f071347f7bb5c4863279bafe7762a980f7c0b",
+                "newestEventTime": "2020-09-11T18:46:45Z",
+                "oldestEventTime": "2020-09-11T18:46:45Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1925Z_zJNGzQovyNAImZV9.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1850Z_jLldN7U8XrspES8p.json.gz"
             },
             {
                 "hashAlgorithm": "SHA-256",
@@ -45,11 +45,11 @@
             },
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "18650414e79e084dff02da66253f071347f7bb5c4863279bafe7762a980f7c0b",
-                "newestEventTime": "2020-09-11T18:46:45Z",
-                "oldestEventTime": "2020-09-11T18:46:45Z",
+                "hashValue": "b2b0e2804d1c6b92d76eee203d7eba32d3d003e6967f175723a83ecc2d7ad4ba",
+                "newestEventTime": "2020-09-11T18:56:05Z",
+                "oldestEventTime": "2020-09-11T18:56:05Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1850Z_jLldN7U8XrspES8p.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1900Z_6LjrkrhsLQMzCiSN.json.gz"
             },
             {
                 "hashAlgorithm": "SHA-256",
@@ -61,43 +61,43 @@
             },
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "6e0d8fcbd712d3f6d1caf4a872681f4290b05ed8a8f1c9450a0a6db92ccab4d7",
-                "newestEventTime": "2020-09-11T19:16:12Z",
-                "oldestEventTime": "2020-09-11T19:16:12Z",
+                "hashValue": "4397a13565a67d9ed6e57737b98eb7e61ca52bb191c9b5da0423136dfc5581c7",
+                "newestEventTime": "2020-09-11T19:06:31Z",
+                "oldestEventTime": "2020-09-11T19:06:31Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1920Z_bj5DRrmILF6jK23a.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1910Z_DLyqye8LaeoD204N.json.gz"
             },
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "b2b0e2804d1c6b92d76eee203d7eba32d3d003e6967f175723a83ecc2d7ad4ba",
-                "newestEventTime": "2020-09-11T18:56:05Z",
-                "oldestEventTime": "2020-09-11T18:56:05Z",
+                "hashValue": "4e1eb2a8b41d032cbb16e5449fc8f3eac304e7d43017a391b37c788c77336196",
+                "newestEventTime": "2020-09-11T19:11:18Z",
+                "oldestEventTime": "2020-09-11T19:11:18Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1900Z_6LjrkrhsLQMzCiSN.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1915Z_TIKlbLnJ6IwUxqxw.json.gz"
             },
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "4397a13565a67d9ed6e57737b98eb7e61ca52bb191c9b5da0423136dfc5581c7",
-                "newestEventTime": "2020-09-11T19:06:31Z",
-                "oldestEventTime": "2020-09-11T19:06:31Z",
+                "hashValue": "6e0d8fcbd712d3f6d1caf4a872681f4290b05ed8a8f1c9450a0a6db92ccab4d7",
+                "newestEventTime": "2020-09-11T19:16:12Z",
+                "oldestEventTime": "2020-09-11T19:16:12Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1910Z_DLyqye8LaeoD204N.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1920Z_bj5DRrmILF6jK23a.json.gz"
             },
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "94f09d2398632c7b0c0066ed5d56768632dd2e06ed9c80af9d0c2c5f59bd60b6",
-                "newestEventTime": "2020-09-11T18:41:58Z",
-                "oldestEventTime": "2020-09-11T18:41:58Z",
+                "hashValue": "45a2906f55cbfc912584e9425f8d3d8d6fabf571a45a5ecd7d2a0f4132b81689",
+                "newestEventTime": "2020-09-11T19:21:28Z",
+                "oldestEventTime": "2020-09-11T19:21:28Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1845Z_TSDKyASOn2ejOq5n.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1925Z_zJNGzQovyNAImZV9.json.gz"
             },
             {
                 "hashAlgorithm": "SHA-256",
-                "hashValue": "9044f9a05d70688bc6f6048d5f8d00764ab65e132b8ffefb193b22ca4394d771",
-                "newestEventTime": "2020-09-11T18:37:10Z",
-                "oldestEventTime": "2020-09-11T18:37:10Z",
+                "hashValue": "420784a5bbc12e9ac442451e8ec1356744fdeabf4fee0d2222508db6d448139c",
+                "newestEventTime": "2020-09-11T19:26:24Z",
+                "oldestEventTime": "2020-09-11T19:26:24Z",
                 "s3Bucket": "alice-bucket",
-                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1840Z_btJydJ2t7hCRnjsN.json.gz"
+                "s3Object": "AWSLogs/123456789123/CloudTrail/us-west-2/2020/09/11/123456789123_CloudTrail_us-west-2_20200911T1930Z_l2pGqVS53QcGdAkp.json.gz"
             }
         ],
         "aws.cloudtrail.digest.newest_event_time": "2020-09-11T19:26:24.000Z",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/create-access-key-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/create-access-key-json.log-expected.json
@@ -31,8 +31,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/create-group-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/create-group-json.log-expected.json
@@ -32,8 +32,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "group",
-            "creation"
+            "creation",
+            "group"
         ],
         "fileset.name": "cloudtrail",
         "group.id": "EXAMPLE_ID",
@@ -81,8 +81,8 @@
         "event.outcome": "failure",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "group",
-            "creation"
+            "creation",
+            "group"
         ],
         "fileset.name": "cloudtrail",
         "group.name": "TEST-GROUP",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/create-user-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/create-user-json.log-expected.json
@@ -26,8 +26,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "creation"
+            "creation",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/create-virtual-mfa-device-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/create-virtual-mfa-device-json.log-expected.json
@@ -28,8 +28,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/deactivate-mfa-device-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/deactivate-mfa-device-json.log-expected.json
@@ -27,8 +27,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/delete-access-key-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/delete-access-key-json.log-expected.json
@@ -27,8 +27,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/delete-group-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/delete-group-json.log-expected.json
@@ -26,8 +26,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "group",
-            "deletion"
+            "deletion",
+            "group"
         ],
         "fileset.name": "cloudtrail",
         "group.name": "TEST-GROUP",
@@ -74,8 +74,8 @@
         "event.outcome": "failure",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "group",
-            "deletion"
+            "deletion",
+            "group"
         ],
         "fileset.name": "cloudtrail",
         "group.name": "TEST-GROUP",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/delete-ssh-public-key-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/delete-ssh-public-key-json.log-expected.json
@@ -27,8 +27,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/delete-user-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/delete-user-json.log-expected.json
@@ -26,8 +26,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "deletion"
+            "deletion",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/delete-virtual-mfa-device-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/delete-virtual-mfa-device-json.log-expected.json
@@ -26,8 +26,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/enable-mfa-device-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/enable-mfa-device-json.log-expected.json
@@ -26,8 +26,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/remove-user-from-group-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/remove-user-from-group-json.log-expected.json
@@ -27,8 +27,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "group",
-            "change"
+            "change",
+            "group"
         ],
         "fileset.name": "cloudtrail",
         "group.name": "Admin",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/update-access-key-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/update-access-key-json.log-expected.json
@@ -28,8 +28,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "user",
-            "change"
+            "change",
+            "user"
         ],
         "fileset.name": "cloudtrail",
         "input.type": "log",

diff --git a/x-pack/filebeat/module/aws/cloudtrail/test/update-group-json.log-expected.json b/x-pack/filebeat/module/aws/cloudtrail/test/update-group-json.log-expected.json
@@ -24,8 +24,8 @@
         "event.outcome": "success",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "group",
-            "change"
+            "change",
+            "group"
         ],
         "fileset.name": "cloudtrail",
         "group.name": "TEST-GROUP",
@@ -74,8 +74,8 @@
         "event.outcome": "failure",
         "event.provider": "iam.amazonaws.com",
         "event.type": [
-            "group",
-            "change"
+            "change",
+            "group"
         ],
         "fileset.name": "cloudtrail",
         "group.name": "TEST-GROUP2",