⚠️ Outdated Version: You are viewing ECS version 1.12, which is outdated. View the latest version (9.0)
ECS Version:
Group
User's group relevant to the event.
Fields
Field Summary
| Field | Type | Level | Description |
|---|---|---|---|
group.domain | keyword | Extended | Name of the directory the group is a member of. |
group.id | keyword | Extended | Unique identifier for the group on the system/platform. |
group.name | keyword | Extended | Name of the group. |
Field Details
group.domain
Type: keyword
Level: Extended
Description: Name of the directory the group is a member of.
Indexed: true
group.id
Type: keyword
Level: Extended
Description: Unique identifier for the group on the system/platform.
Indexed: true
group.name
Type: keyword
Level: Extended
Description: Name of the group.
Indexed: true