From 5cad353cca492db26d3b6eecf8a61a052fac6f99 Mon Sep 17 00:00:00 2001 From: Jesse Szwedko Date: Thu, 2 Jan 2025 15:26:05 -0800 Subject: [PATCH] chore(vrl): Fix example for linux auth log (#22110) The logs don't include the year. Signed-off-by: Jesse Szwedko --- .../reference/remap/functions/parse_linux_authorization.cue | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/website/cue/reference/remap/functions/parse_linux_authorization.cue b/website/cue/reference/remap/functions/parse_linux_authorization.cue index c997148e0e61d..1d1230e88d629 100644 --- a/website/cue/reference/remap/functions/parse_linux_authorization.cue +++ b/website/cue/reference/remap/functions/parse_linux_authorization.cue @@ -31,7 +31,7 @@ remap: functions: parse_linux_authorization: { title: "Parse Linux authorization event" source: """ parse_linux_authorization!( - s'Mar 23 2023 01:49:58 localhost sshd[1111]: Accepted publickey for eng from 10.1.1.1 port 8888 ssh2: RSA SHA256:foobar' + s'Mar 23 01:49:58 localhost sshd[1111]: Accepted publickey for eng from 10.1.1.1 port 8888 ssh2: RSA SHA256:foobar' ) """ return: { @@ -39,7 +39,7 @@ remap: functions: parse_linux_authorization: { hostname: "localhost" message: "Accepted publickey for eng from 10.1.1.1 port 8888 ssh2: RSA SHA256:foobar" procid: 1111 - timestamp: "2023-03-23T01:49:58Z" + timestamp: "2025-03-23T01:49:58Z" } }, ]