Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add support for translating numeric/binary values
- SYSCALL: arch, syscall - everywhere except EXECVE, PROCTITLE: *uid, *gid - *uid, *gid fields get special treatment in the parsing stage because they occur so frequently. - SOCKADDR: saddr A Key variant for translated values that are serialized in UPPERCASE is added. The result is mostly comparable to auditd does when configured with log_format=ENRICHED.
- Loading branch information