Fix misspelling of username & set ECS version

elastic · May 5, 2020 · cdd3833 · cdd3833
1 parent ebae871
commit cdd3833
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/filebeat/module/osquery/result/config/result.yml b/filebeat/module/osquery/result/config/result.yml
@@ -6,3 +6,8 @@ paths:
 exclude_files: [".gz$"]
 json.overwrite_keys: true
 json.add_error_key: true
+processors:
+  - add_fields:
+      target: ''
+      fields:
+        ecs.version: 1.5.0
diff --git a/filebeat/module/osquery/result/ingest/pipeline.json b/filebeat/module/osquery/result/ingest/pipeline.json
@@ -156,7 +156,7 @@
         "set": {
             "field": "user.name",
             "value": "{{osquery.result.decorations.username}}",
-            "if": "ctx?.osquery?.result?.decorations?.uusername != null"
+            "if": "ctx?.osquery?.result?.decorations?.username != null"
         }
     },
     {