Skip to content

Commit

Permalink
[RFC] Multiple Users - Update to align with new proposal stages (#1239)
Browse files Browse the repository at this point in the history
  • Loading branch information
ebeahan authored Feb 17, 2021
1 parent 80f71e3 commit 62d310a
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions rfcs/text/0007-multiple-users.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
# 0007: Multiple users in an event
<!-- Leave this ID at 0000. The ECS team will assign a unique, contiguous RFC number upon merging the initial stage of this RFC. -->

- Stage: **3 (candidate)** <!-- Update to reflect target stage. See https://elastic.github.io/ecs/stages.html -->
- Date: **2020-11-11** <!-- The ECS team sets this date at merge time. This is the date of the latest stage advancement. -->
- Stage: **3 (finished)** <!-- Update to reflect target stage. See https://elastic.github.io/ecs/stages.html -->
- Date: **2021-02-17** <!-- The ECS team sets this date at merge time. This is the date of the latest stage advancement. -->

Many log events refer to more than one user at the same time.
Examples of this are remote logons as someone else, user management and privilege escalation.
Expand Down Expand Up @@ -757,7 +757,8 @@ e.g.:

* Stage 2: https://github.com/elastic/ecs/pull/914
* Stage 2 correction: https://github.com/elastic/ecs/pull/996
* Stage 3: https://github.com/elastic/ecs/pull/1017
* Legacy Stage 3: https://github.com/elastic/ecs/pull/1017
* Stage 3 (Finished): https://github.com/elastic/ecs/pull/1239

Note: This RFC was initially proposed via a PR that targeted stage 2,
given the amount of discussion that has already has happened on this subject.

0 comments on commit 62d310a

Please sign in to comment.