FEATURE: Add Events column layout for event.module system #12628

2025-12-12 20:22:59 +01:00 · 2024-03-20 17:07:37 -04:00
parent 655d3e349c
commit 778997bed4
1 changed files with 9 additions and 0 deletions
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -1064,6 +1064,15 @@ soc:
        -  event.action
        -  event.outcome
        -  event.dataset
+      ':system:':
+        -  soc_timestamp
+        -  process.name
+        -  process.pid
+        -  user.effective.name
+        -  user.name
+        -  system.auth.sudo.command
+        -  event.dataset
+        -  message
    server:
      bindAddress: 0.0.0.0:9822
      baseUrl: /