From d7c36ad32cc80bc3cb68e3e19dcf0db913d634b5 Mon Sep 17 00:00:00 2001 From: Andrew Stucki Date: Thu, 27 May 2021 14:06:20 -0400 Subject: [PATCH] Clean up fixture files --- .../module/crowdstrike/falcon/test/falcon-sample.log | 4 ++-- .../falcon/test/falcon-sample.log-expected.json | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/x-pack/filebeat/module/crowdstrike/falcon/test/falcon-sample.log b/x-pack/filebeat/module/crowdstrike/falcon/test/falcon-sample.log index efd3b565576e..6a811c1efb2c 100644 --- a/x-pack/filebeat/module/crowdstrike/falcon/test/falcon-sample.log +++ b/x-pack/filebeat/module/crowdstrike/falcon/test/falcon-sample.log @@ -87,11 +87,11 @@ }, { "Key": "actor_user_uuid", - "ValueString": "123ab141-fab1-41c9-85c5-43a1ef90d2c2" + "ValueString": "123ab123-abc1-12a1-12a1-12a1ab12a1a1" }, { "Key": "actor_cid", - "ValueString": "774694c2ef8c43fdb64ec3056ddfb96d" + "ValueString": "123456a1ab1a12abc12ab1234abcd12a" }, { "Key": "target_user", diff --git a/x-pack/filebeat/module/crowdstrike/falcon/test/falcon-sample.log-expected.json b/x-pack/filebeat/module/crowdstrike/falcon/test/falcon-sample.log-expected.json index 05808f06c8d2..3caaa856621a 100644 --- a/x-pack/filebeat/module/crowdstrike/falcon/test/falcon-sample.log-expected.json +++ b/x-pack/filebeat/module/crowdstrike/falcon/test/falcon-sample.log-expected.json @@ -117,12 +117,12 @@ { "crowdstrike.event.AuditKeyValues": [ { - "Key": "actor_user_uuid", - "ValueString": "123ab141-fab1-41c9-85c5-43a1ef90d2c2" + "Key": "actor_cid", + "ValueString": "123456a1ab1a12abc12ab1234abcd12a" }, { - "Key": "actor_cid", - "ValueString": "774694c2ef8c43fdb64ec3056ddfb96d" + "Key": "actor_user_uuid", + "ValueString": "123ab123-abc1-12a1-12a1-12a1ab12a1a1" }, { "Key": "trace_id",