Update ecs-migration.yml

elastic · Feb 5, 2019 · dfb52cc · dfb52cc
1 parent 4ac3343
commit dfb52cc
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/dev-tools/ecs-migration.yml b/dev-tools/ecs-migration.yml
@@ -1613,6 +1613,12 @@
   alias: true
   beat: auditbeat
 
+- from: event.type
+  to: auditd.message_type
+  alias: false
+  beat: auditbeat
+  comment: event.type is reserved for future use by ECS.
+
 # Metricbeat
 
 ## Metricbeat base fields