elastic · ycombinator · Mar 2, 2021 · Feb 22, 2021 · Feb 22, 2021 · Feb 23, 2021
diff --git a/go.mod b/go.mod
@@ -4,7 +4,7 @@ go 1.12
 
 require (
 	github.com/blang/semver v3.5.1+incompatible
-	github.com/elastic/elastic-package v0.0.0-20210225101737-c8b00a93596e
+	github.com/elastic/elastic-package v0.0.0-20210301141614-adf93024cc49
 	github.com/elastic/package-registry v0.17.0
 	github.com/magefile/mage v1.11.0
 	github.com/pkg/errors v0.9.1

diff --git a/go.sum b/go.sum
@@ -84,8 +84,8 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=
 github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8PWV+bWy6jNmig1y/TA+kYO4g3RSRF0IAv0no=
-github.com/elastic/elastic-package v0.0.0-20210225101737-c8b00a93596e h1:robuyReHsYgD3qlg9Z7Ro7Xqbzm0XqS03V/XKkuriOg=
-github.com/elastic/elastic-package v0.0.0-20210225101737-c8b00a93596e/go.mod h1:hzJTWwSTpP3mLK9NcjnoLifXmOjitGbVwgI/RPmsEGE=
+github.com/elastic/elastic-package v0.0.0-20210301141614-adf93024cc49 h1:7jJqx63yI3YJ/X9mh1h90smgh6g/uO/fRnbbrhCjdqk=
+github.com/elastic/elastic-package v0.0.0-20210301141614-adf93024cc49/go.mod h1:vfHw6DAwhslkjTSrKN7uCl3V9KyJ/2dH2hMi3z0PP9U=
 github.com/elastic/go-elasticsearch/v7 v7.9.0 h1:UEau+a1MiiE/F+UrDj60kqIHFWdzU1M2y/YtBU2NC2M=
 github.com/elastic/go-elasticsearch/v7 v7.9.0/go.mod h1:OJ4wdbtDNk5g503kvlHLyErCgQwwzmDtaFC4XyOxXA4=
 github.com/elastic/go-licenser v0.3.1/go.mod h1:D8eNQk70FOCVBl3smCGQt/lv7meBeQno2eI1S5apiHQ=
@@ -95,8 +95,8 @@ github.com/elastic/go-ucfg v0.8.4-0.20200415140258-1232bd4774a6 h1:Ehbr7du4rSSEy
 github.com/elastic/go-ucfg v0.8.4-0.20200415140258-1232bd4774a6/go.mod h1:iaiY0NBIYeasNgycLyTvhJftQlQEUO2hpF+FX0JKxzo=
 github.com/elastic/package-registry v0.17.0 h1:Gh7u3TlHA3GJh+C/OZ8Pf4EUrFxcCXMAe2kUCjAiYgQ=
 github.com/elastic/package-registry v0.17.0/go.mod h1:fMVt9ozLSPAIgYTDgV23IZrSoDKZma7VKpA4uSkfPts=
-github.com/elastic/package-spec/code/go v0.0.0-20210210152225-3f48d5aaa17e h1:kL1ypDLbxsEyPxkjmvccMau5Ap5s3yMk4qDO3xlbEos=
-github.com/elastic/package-spec/code/go v0.0.0-20210210152225-3f48d5aaa17e/go.mod h1:dog1l3e8NoRYxuB8yIbbOWglE6GSQuU6ZL75wT9pKL8=
+github.com/elastic/package-spec/code/go v0.0.0-20210222225810-541116689fca h1:dEAP2TACrsICd/pMzFlEx2llqqWcB68CjJRfnMhQL8E=
+github.com/elastic/package-spec/code/go v0.0.0-20210222225810-541116689fca/go.mod h1:dog1l3e8NoRYxuB8yIbbOWglE6GSQuU6ZL75wT9pKL8=
 github.com/emirpasic/gods v1.12.0 h1:QAUIPSaCu4G+POclxeqb3F+WPpdKqFGlw36+yOzGlrg=
 github.com/emirpasic/gods v1.12.0/go.mod h1:YfzfFFoVP/catgzJb4IKIqXjX78Ha8FMSDh3ymbK86o=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=

diff --git a/packages/apache/data_stream/access/_dev/test/pipeline/test-access-basic.log-config.json b/packages/apache/data_stream/access/_dev/test/pipeline/test-access-basic.log-config.json
diff --git a/packages/apache/data_stream/access/_dev/test/pipeline/test-access-basic.log-config.yml b/packages/apache/data_stream/access/_dev/test/pipeline/test-access-basic.log-config.yml
@@ -0,0 +1,2 @@
+fields:
+  "@timestamp": "2020-04-28T11:07:58.223Z"
diff --git a/packages/apache/data_stream/access/_dev/test/pipeline/test-access-darwin.log-config.json b/packages/apache/data_stream/access/_dev/test/pipeline/test-access-darwin.log-config.json
diff --git a/packages/apache/data_stream/access/_dev/test/pipeline/test-access-darwin.log-config.yml b/packages/apache/data_stream/access/_dev/test/pipeline/test-access-darwin.log-config.yml
@@ -0,0 +1,2 @@
+fields:
+  "@timestamp": "2020-04-28T11:07:58.223Z"
diff --git a/...ages/apache/data_stream/access/_dev/test/pipeline/test-access-ssl-request.log-config.json b/...ages/apache/data_stream/access/_dev/test/pipeline/test-access-ssl-request.log-config.json
diff --git a/packages/apache/data_stream/access/_dev/test/pipeline/test-access-ssl-request.log-config.yml b/packages/apache/data_stream/access/_dev/test/pipeline/test-access-ssl-request.log-config.yml
@@ -0,0 +1,2 @@
+fields:
+  "@timestamp": "2020-04-28T11:07:58.223Z"
diff --git a/packages/apache/data_stream/access/_dev/test/pipeline/test-access-ubuntu.log-config.json b/packages/apache/data_stream/access/_dev/test/pipeline/test-access-ubuntu.log-config.json
diff --git a/packages/apache/data_stream/access/_dev/test/pipeline/test-access-ubuntu.log-config.yml b/packages/apache/data_stream/access/_dev/test/pipeline/test-access-ubuntu.log-config.yml
@@ -0,0 +1,2 @@
+fields:
+  "@timestamp": "2020-04-28T11:07:58.223Z"
diff --git a/packages/apache/data_stream/access/_dev/test/pipeline/test-access-vhost.log-config.json b/packages/apache/data_stream/access/_dev/test/pipeline/test-access-vhost.log-config.json
diff --git a/packages/apache/data_stream/access/_dev/test/pipeline/test-access-vhost.log-config.yml b/packages/apache/data_stream/access/_dev/test/pipeline/test-access-vhost.log-config.yml
@@ -0,0 +1,2 @@
+fields:
+  "@timestamp": "2020-04-28T11:07:58.223Z"
diff --git a/packages/apache/data_stream/error/_dev/test/pipeline/test-error-basic.log-config.json b/packages/apache/data_stream/error/_dev/test/pipeline/test-error-basic.log-config.json
diff --git a/packages/apache/data_stream/error/_dev/test/pipeline/test-error-basic.log-config.yml b/packages/apache/data_stream/error/_dev/test/pipeline/test-error-basic.log-config.yml
@@ -0,0 +1,2 @@
+fields:
+  event.timezone: "GMT+2"
diff --git a/packages/apache/data_stream/error/_dev/test/pipeline/test-error-darwin.log-config.json b/packages/apache/data_stream/error/_dev/test/pipeline/test-error-darwin.log-config.json
diff --git a/packages/apache/data_stream/error/_dev/test/pipeline/test-error-darwin.log-config.yml b/packages/apache/data_stream/error/_dev/test/pipeline/test-error-darwin.log-config.yml
@@ -0,0 +1,2 @@
+fields:
+  event.timezone: "GMT+2"
diff --git a/packages/apache/data_stream/error/_dev/test/pipeline/test-error-ubuntu.log-config.json b/packages/apache/data_stream/error/_dev/test/pipeline/test-error-ubuntu.log-config.json
diff --git a/packages/apache/data_stream/error/_dev/test/pipeline/test-error-ubuntu.log-config.yml b/packages/apache/data_stream/error/_dev/test/pipeline/test-error-ubuntu.log-config.yml
@@ -0,0 +1,2 @@
+fields:
+  event.timezone: "GMT+2"
diff --git a/packages/auditd/data_stream/log/_dev/test/pipeline/test-auditd-raw.log-config.json b/packages/auditd/data_stream/log/_dev/test/pipeline/test-auditd-raw.log-config.json
diff --git a/packages/auditd/data_stream/log/_dev/test/pipeline/test-auditd-raw.log-config.yml b/packages/auditd/data_stream/log/_dev/test/pipeline/test-auditd-raw.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/packages/auditd/data_stream/log/_dev/test/pipeline/test-auditd-useradd.log-config.json b/packages/auditd/data_stream/log/_dev/test/pipeline/test-auditd-useradd.log-config.json
diff --git a/packages/auditd/data_stream/log/_dev/test/pipeline/test-auditd-useradd.log-config.yml b/packages/auditd/data_stream/log/_dev/test/pipeline/test-auditd-useradd.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-add-user-to-group-json.log-config.json b/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-add-user-to-group-json.log-config.json
diff --git a/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-add-user-to-group-json.log-config.yml b/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-add-user-to-group-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-assume-role-json.log-config.json b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-assume-role-json.log-config.json
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-assume-role-json.log-config.yml b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-assume-role-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...s/aws/data_stream/cloudtrail/_dev/test/pipeline/test-change-password-json.log-config.json b/...s/aws/data_stream/cloudtrail/_dev/test/pipeline/test-change-password-json.log-config.json
diff --git a/...es/aws/data_stream/cloudtrail/_dev/test/pipeline/test-change-password-json.log-config.yml b/...es/aws/data_stream/cloudtrail/_dev/test/pipeline/test-change-password-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-cloudtrail-digest-json.log-config.json b/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-cloudtrail-digest-json.log-config.json
diff --git a/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-cloudtrail-digest-json.log-config.yml b/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-cloudtrail-digest-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ges/aws/data_stream/cloudtrail/_dev/test/pipeline/test-console-login-json.log-config.json b/...ges/aws/data_stream/cloudtrail/_dev/test/pipeline/test-console-login-json.log-config.json
diff --git a/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-console-login-json.log-config.yml b/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-console-login-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-access-key-json.log-config.json b/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-access-key-json.log-config.json
diff --git a/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-access-key-json.log-config.yml b/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-access-key-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-group-json.log-config.json b/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-group-json.log-config.json
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-group-json.log-config.yml b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-group-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...s/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-key-pair-json.log-config.json b/...s/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-key-pair-json.log-config.json
diff --git a/...es/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-key-pair-json.log-config.yml b/...es/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-key-pair-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-trail-json.log-config.json b/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-trail-json.log-config.json
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-trail-json.log-config.yml b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-trail-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-user-json.log-config.json b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-user-json.log-config.json
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-user-json.log-config.yml b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-user-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/..._stream/cloudtrail/_dev/test/pipeline/test-create-virtual-mfa-device-json.log-config.json b/..._stream/cloudtrail/_dev/test/pipeline/test-create-virtual-mfa-device-json.log-config.json
diff --git a/...a_stream/cloudtrail/_dev/test/pipeline/test-create-virtual-mfa-device-json.log-config.yml b/...a_stream/cloudtrail/_dev/test/pipeline/test-create-virtual-mfa-device-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...data_stream/cloudtrail/_dev/test/pipeline/test-deactivate-mfa-device-json.log-config.json b/...data_stream/cloudtrail/_dev/test/pipeline/test-deactivate-mfa-device-json.log-config.json
diff --git a/.../data_stream/cloudtrail/_dev/test/pipeline/test-deactivate-mfa-device-json.log-config.yml b/.../data_stream/cloudtrail/_dev/test/pipeline/test-deactivate-mfa-device-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-access-key-json.log-config.json b/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-access-key-json.log-config.json
diff --git a/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-access-key-json.log-config.yml b/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-access-key-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ges/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-bucket-json.log-config.json b/...ges/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-bucket-json.log-config.json
diff --git a/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-bucket-json.log-config.yml b/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-bucket-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-group-json.log-config.json b/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-group-json.log-config.json
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-group-json.log-config.yml b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-group-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...data_stream/cloudtrail/_dev/test/pipeline/test-delete-ssh-public-key-json.log-config.json b/...data_stream/cloudtrail/_dev/test/pipeline/test-delete-ssh-public-key-json.log-config.json
diff --git a/.../data_stream/cloudtrail/_dev/test/pipeline/test-delete-ssh-public-key-json.log-config.yml b/.../data_stream/cloudtrail/_dev/test/pipeline/test-delete-ssh-public-key-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-trail-json.log-config.json b/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-trail-json.log-config.json
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-trail-json.log-config.yml b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-trail-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-user-json.log-config.json b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-user-json.log-config.json
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-user-json.log-config.yml b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-user-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/..._stream/cloudtrail/_dev/test/pipeline/test-delete-virtual-mfa-device-json.log-config.json b/..._stream/cloudtrail/_dev/test/pipeline/test-delete-virtual-mfa-device-json.log-config.json
diff --git a/...a_stream/cloudtrail/_dev/test/pipeline/test-delete-virtual-mfa-device-json.log-config.yml b/...a_stream/cloudtrail/_dev/test/pipeline/test-delete-virtual-mfa-device-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-enable-mfa-device-json.log-config.json b/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-enable-mfa-device-json.log-config.json
diff --git a/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-enable-mfa-device-json.log-config.yml b/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-enable-mfa-device-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-insight-json.log-config.json b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-insight-json.log-config.json
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-insight-json.log-config.yml b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-insight-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ata_stream/cloudtrail/_dev/test/pipeline/test-remove-user-from-group-json.log-config.json b/...ata_stream/cloudtrail/_dev/test/pipeline/test-remove-user-from-group-json.log-config.json
diff --git a/...data_stream/cloudtrail/_dev/test/pipeline/test-remove-user-from-group-json.log-config.yml b/...data_stream/cloudtrail/_dev/test/pipeline/test-remove-user-from-group-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ges/aws/data_stream/cloudtrail/_dev/test/pipeline/test-start-logging-json.log-config.json b/...ges/aws/data_stream/cloudtrail/_dev/test/pipeline/test-start-logging-json.log-config.json
diff --git a/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-start-logging-json.log-config.yml b/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-start-logging-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-stop-logging-json.log-config.json b/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-stop-logging-json.log-config.json
diff --git a/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-stop-logging-json.log-config.yml b/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-stop-logging-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-access-key-json.log-config.json b/...aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-access-key-json.log-config.json
diff --git a/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-access-key-json.log-config.yml b/.../aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-access-key-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...eam/cloudtrail/_dev/test/pipeline/test-update-accout-password-policy-json.log-config.json b/...eam/cloudtrail/_dev/test/pipeline/test-update-accout-password-policy-json.log-config.json
diff --git a/...ream/cloudtrail/_dev/test/pipeline/test-update-accout-password-policy-json.log-config.yml b/...ream/cloudtrail/_dev/test/pipeline/test-update-accout-password-policy-json.log-config.yml
@@ -0,0 +1,2 @@
+dynamic_fields:
+  event.ingested: ".*"
diff --git a/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-group-json.log-config.json b/...ages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-group-json.log-config.json
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		fields:
		"@timestamp": "2020-04-28T11:07:58.223Z"