File tree Expand file tree Collapse file tree 2 files changed +13
-2
lines changed Expand file tree Collapse file tree 2 files changed +13
-2
lines changed Original file line number Diff line number Diff line change 1
- BASH_MSG HISTORY: PID=%{INT:pid:int } UID=%{INT:uid:int } %{GREEDYDATA:command}
1
+ BASH_MSG HISTORY: PID=%{INT:bash_pid } UID=%{INT:uid} %{GREEDYDATA:command}
Original file line number Diff line number Diff line change @@ -6,8 +6,19 @@ data = [
6
6
"@source_host": "master01",
7
7
"program": "-bash",
8
8
"uid": 0,
9
- "pid ": 23883,
9
+ "bash_pid ": 23883,
10
10
"command": "echo boem",
11
11
}
12
12
},
13
+ {
14
+ "raw": "<14>1 2024-12-09T11:18:16.406259+01:00 storctrl02 -bash[1102070]: - -bash: HISTORY: PID=1102070 UID=4005 sudo cat /etc/cron.d/aad-*",
15
+ "expected": {
16
+ "@source_host": "storctrl02",
17
+ "program": "-bash",
18
+ "uid": 4005,
19
+ "pid": 1102070,
20
+ "bash_pid": 1102070,
21
+ "command": "sudo cat /etc/cron.d/aad-*",
22
+ }
23
+ },
13
24
]
You can’t perform that action at this time.
0 commit comments