add changes field into collection definition

CrossRealms · Jun 28, 2023 · dbde291 · dbde291
1 parent 7c230cd
commit dbde291
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/cyences_app_for_splunk/default/transforms.conf b/cyences_app_for_splunk/default/transforms.conf
@@ -137,13 +137,13 @@ case_sensitive_match = false
 [cs_linux_users]
 external_type = kvstore
 collection = cs_linux_users_colllections
-fields_list = _key,host,UID,_time,USERNAME,COMMAND_SHELL,HOME_DIR,SUDOACCESS,USER_INFO,GID,status
+fields_list = _key,host,UID,_time,USERNAME,COMMAND_SHELL,HOME_DIR,SUDOACCESS,USER_INFO,GID,status,changes
 case_sensitive_match = false
 
 [cs_linux_groups]
 external_type = kvstore
 collection = cs_linux_groups_colllections
-fields_list = _key,host,group_name,_time,users,status
+fields_list = _key,host,group_name,_time,users,status,changes
 case_sensitive_match = false