Cherry-pick #16280 to 7.x: [Filebeat] Improve ECS field mapping for auditd module#18278

Closed

andrewkroh wants to merge 1 commit intoelastic:7.xfrom andrewkroh:backport_16280_7.x

+2

Commits on May 6, 2020

[Filebeat] Improve ECS field mapping for auditd module (elastic#16280 )

leehinman
authored and
andrewkroh
committed