Unverified Commit fee192fb authored by Andrzej Stencel's avatar Andrzej Stencel
Browse files

feat!: change default event_message to :message

parent 3714d984
......@@ -383,7 +383,7 @@ listed above.
- `log_names` - **required**
- `event_format` - `:legacy` for legacy format or `:json` for JSON format. `:legacy` is default.
- `event_message` - Use with JSON format. `:complete`, `:message` (recommended), or `:metadata` for metadata only.
`:complete` is default.
`:message` is default.
- `allowlist` - Available in Collector version 19.351-4 and later. A comma-separated list of event IDs.
This is an empty string as default.
- `denylist` - Available in Collector version 19.351-4 and later. A comma-separated list of event IDs.
......
......@@ -12,7 +12,7 @@ class Chef
attribute :source_type, kind_of: Symbol, default: :local_windows_event_log, equal_to: [:local_windows_event_log]
attribute :log_names, kind_of: Array, required: true
attribute :event_format, kind_of: Symbol, default: :legacy, equal_to: EVENT_FORMAT.keys
attribute :event_message, kind_of: Symbol, default: :complete, equal_to: EVENT_MESSAGE.keys
attribute :event_message, kind_of: Symbol, default: :message, equal_to: EVENT_MESSAGE.keys
attribute :allowlist, kind_of: String
attribute :denylist, kind_of: String
end
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment