[WIP] Clarify capabilities of the Filebeat auditd module (elastic#17068)

* Update filebeat/docs/modules/auditd.asciidoc Update `filebeat/docs/modules/auditd.asciidoc` - Add note regarding capabilities of the Filebeat auditd module * Edit text and run make update * Run make update again Co-authored-by: DeDe Morton <[email protected]>
dedemorton · Jun 1, 2020 · 949daaa · 949daaa
1 parent 1b13b6d
commit 949daaa
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/filebeat/docs/modules/auditd.asciidoc b/filebeat/docs/modules/auditd.asciidoc
@@ -11,6 +11,10 @@ This file is generated! See scripts/docs_collector.py
 The +{modulename}+ module collects and parses logs from the audit daemon
 (`auditd`).
 
+NOTE: Although {beatname_uc} is able to parse logs by using the `auditd` module,
+{auditbeat-ref}/auditbeat-module-auditd.html[{auditbeat}] offers more advanced
+features for monitoring audit logs.
+
 include::../include/what-happens.asciidoc[]
 
 include::../include/gs-link.asciidoc[]

diff --git a/filebeat/module/auditd/_meta/docs.asciidoc b/filebeat/module/auditd/_meta/docs.asciidoc
@@ -6,6 +6,10 @@
 The +{modulename}+ module collects and parses logs from the audit daemon
 (`auditd`).
 
+NOTE: Although {beatname_uc} is able to parse logs by using the `auditd` module,
+{auditbeat-ref}/auditbeat-module-auditd.html[{auditbeat}] offers more advanced
+features for monitoring audit logs.
+
 include::../include/what-happens.asciidoc[]
 
 include::../include/gs-link.asciidoc[]