Skip to content

Commit

Permalink
chore(vrl): Fix example for linux auth log (#22110)
Browse files Browse the repository at this point in the history
The logs don't include the year.

Signed-off-by: Jesse Szwedko <[email protected]>
  • Loading branch information
jszwedko authored Jan 2, 2025
1 parent 2ed4cd9 commit 5cad353
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -31,15 +31,15 @@ remap: functions: parse_linux_authorization: {
title: "Parse Linux authorization event"
source: """
parse_linux_authorization!(
s'Mar 23 2023 01:49:58 localhost sshd[1111]: Accepted publickey for eng from 10.1.1.1 port 8888 ssh2: RSA SHA256:foobar'
s'Mar 23 01:49:58 localhost sshd[1111]: Accepted publickey for eng from 10.1.1.1 port 8888 ssh2: RSA SHA256:foobar'
)
"""
return: {
appname: "sshd"
hostname: "localhost"
message: "Accepted publickey for eng from 10.1.1.1 port 8888 ssh2: RSA SHA256:foobar"
procid: 1111
timestamp: "2023-03-23T01:49:58Z"
timestamp: "2025-03-23T01:49:58Z"
}
},
]
Expand Down

0 comments on commit 5cad353

Please sign in to comment.