{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/beats/issues/8852","repository_url":"https://api.github.com/repos/elastic/beats","labels_url":"https://api.github.com/repos/elastic/beats/issues/8852/labels{/name}","comments_url":"https://api.github.com/repos/elastic/beats/issues/8852/comments","events_url":"https://api.github.com/repos/elastic/beats/issues/8852/events","html_url":"https://github.com/elastic/beats/pull/8852","id":376031552,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI3MzQwNDU2","number":8852,"title":"Filebeat: ingest Elasticsearch structured audit logs","user":{"login":"ycombinator","id":51061,"node_id":"MDQ6VXNlcjUxMDYx","avatar_url":"https://avatars2.githubusercontent.com/u/51061?v=4","gravatar_id":"","url":"https://api.github.com/users/ycombinator","html_url":"https://github.com/ycombinator","followers_url":"https://api.github.com/users/ycombinator/followers","following_url":"https://api.github.com/users/ycombinator/following{/other_user}","gists_url":"https://api.github.com/users/ycombinator/gists{/gist_id}","starred_url":"https://api.github.com/users/ycombinator/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ycombinator/subscriptions","organizations_url":"https://api.github.com/users/ycombinator/orgs","repos_url":"https://api.github.com/users/ycombinator/repos","events_url":"https://api.github.com/users/ycombinator/events{/privacy}","received_events_url":"https://api.github.com/users/ycombinator/received_events","type":"User","site_admin":false},"labels":[{"id":294278645,"node_id":"MDU6TGFiZWwyOTQyNzg2NDU=","url":"https://api.github.com/repos/elastic/beats/labels/Filebeat","name":"Filebeat","color":"008000","default":false},{"id":360592718,"node_id":"MDU6TGFiZWwzNjA1OTI3MTg=","url":"https://api.github.com/repos/elastic/beats/labels/needs_backport","name":"needs_backport","color":"1d76db","default":false},{"id":228068770,"node_id":"MDU6TGFiZWwyMjgwNjg3NzA=","url":"https://api.github.com/repos/elastic/beats/labels/review","name":"review","color":"207de5","default":false},{"id":1104784048,"node_id":"MDU6TGFiZWwxMTA0Nzg0MDQ4","url":"https://api.github.com/repos/elastic/beats/labels/v6.6.0","name":"v6.6.0","color":"ededed","default":false},{"id":884168819,"node_id":"MDU6TGFiZWw4ODQxNjg4MTk=","url":"https://api.github.com/repos/elastic/beats/labels/v7.0.0-alpha1","name":"v7.0.0-alpha1","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-10-31T15:48:37Z","updated_at":"2018-11-02T22:45:02Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/elastic/beats/pulls/8852","html_url":"https://github.com/elastic/beats/pull/8852","diff_url":"https://github.com/elastic/beats/pull/8852.diff","patch_url":"https://github.com/elastic/beats/pull/8852.patch"},"body":"Resolves #8831.\r\n\r\nThis PR teaches the `elasticsearch/audit` fileset to ingest structured audit logs in addition to the semi-structured audit logs, which it already knows how to ingest.\r\n\r\n### TODO\r\n* [ ] Docs\r\n* [ ] CHANGELOG entry"},"comment":{"url":"https://api.github.com/repos/elastic/beats/issues/comments/435530713","html_url":"https://github.com/elastic/beats/pull/8852#issuecomment-435530713","issue_url":"https://api.github.com/repos/elastic/beats/issues/8852","id":435530713,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNTUzMDcxMw==","user":{"login":"ycombinator","id":51061,"node_id":"MDQ6VXNlcjUxMDYx","avatar_url":"https://avatars2.githubusercontent.com/u/51061?v=4","gravatar_id":"","url":"https://api.github.com/users/ycombinator","html_url":"https://github.com/ycombinator","followers_url":"https://api.github.com/users/ycombinator/followers","following_url":"https://api.github.com/users/ycombinator/following{/other_user}","gists_url":"https://api.github.com/users/ycombinator/gists{/gist_id}","starred_url":"https://api.github.com/users/ycombinator/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ycombinator/subscriptions","organizations_url":"https://api.github.com/users/ycombinator/orgs","repos_url":"https://api.github.com/users/ycombinator/repos","events_url":"https://api.github.com/users/ycombinator/events{/privacy}","received_events_url":"https://api.github.com/users/ycombinator/received_events","type":"User","site_admin":false},"created_at":"2018-11-02T22:45:02Z","updated_at":"2018-11-02T22:45:02Z","author_association":"CONTRIBUTOR","body":"As noted in my previous comment, I've started work on teaching Filebeat to support multiple ingest pipelines here: https://github.com/elastic/beats/pull/8914."}}
{"actor":{"display_login":"ycombinator"}}