elastic · bfilar · Mar 9, 2022 · Mar 9, 2022 · Mar 10, 2022 · Mar 18, 2022
diff --git a/...ditbeat_process_hosts_ecs/kibana/dashboard/ml_auditbeat_hosts_process_event_rate_ecs.json b/...ditbeat_process_hosts_ecs/kibana/dashboard/ml_auditbeat_hosts_process_event_rate_ecs.json
diff --git a/...auditbeat_process_hosts_ecs/kibana/dashboard/ml_auditbeat_hosts_process_explorer_ecs.json b/...auditbeat_process_hosts_ecs/kibana/dashboard/ml_auditbeat_hosts_process_explorer_ecs.json
diff --git a/...ules/auditbeat_process_hosts_ecs/kibana/search/ml_auditbeat_hosts_process_events_ecs.json b/...ules/auditbeat_process_hosts_ecs/kibana/search/ml_auditbeat_hosts_process_events_ecs.json
diff --git a/..._hosts_ecs/kibana/visualization/ml_auditbeat_hosts_process_event_rate_by_process_ecs.json b/..._hosts_ecs/kibana/visualization/ml_auditbeat_hosts_process_event_rate_by_process_ecs.json
diff --git a/...process_hosts_ecs/kibana/visualization/ml_auditbeat_hosts_process_event_rate_vis_ecs.json b/...process_hosts_ecs/kibana/visualization/ml_auditbeat_hosts_process_event_rate_vis_ecs.json
diff --git a/...eat_process_hosts_ecs/kibana/visualization/ml_auditbeat_hosts_process_occurrence_ecs.json b/...eat_process_hosts_ecs/kibana/visualization/ml_auditbeat_hosts_process_occurrence_ecs.json
diff --git a/...ck/plugins/ml/server/models/data_recognizer/modules/auditbeat_process_hosts_ecs/logo.json b/...ck/plugins/ml/server/models/data_recognizer/modules/auditbeat_process_hosts_ecs/logo.json
diff --git a/...lugins/ml/server/models/data_recognizer/modules/auditbeat_process_hosts_ecs/manifest.json b/...lugins/ml/server/models/data_recognizer/modules/auditbeat_process_hosts_ecs/manifest.json
diff --git a/.../modules/auditbeat_process_hosts_ecs/ml/datafeed_hosts_high_count_process_events_ecs.json b/.../modules/auditbeat_process_hosts_ecs/ml/datafeed_hosts_high_count_process_events_ecs.json
diff --git a/...izer/modules/auditbeat_process_hosts_ecs/ml/datafeed_hosts_rare_process_activity_ecs.json b/...izer/modules/auditbeat_process_hosts_ecs/ml/datafeed_hosts_rare_process_activity_ecs.json
diff --git a/...ecognizer/modules/auditbeat_process_hosts_ecs/ml/hosts_high_count_process_events_ecs.json b/...ecognizer/modules/auditbeat_process_hosts_ecs/ml/hosts_high_count_process_events_ecs.json
diff --git a/...ta_recognizer/modules/auditbeat_process_hosts_ecs/ml/hosts_rare_process_activity_ecs.json b/...ta_recognizer/modules/auditbeat_process_hosts_ecs/ml/hosts_rare_process_activity_ecs.json
diff --git a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/manifest.json b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/manifest.json
@@ -41,6 +41,10 @@
     {
       "id": "auth_rare_user",
       "file": "auth_rare_user.json"
+    },
+    {
+      "id": "suspicious_login_activity_ecs",
+      "file": "suspicious_login_activity_ecs.json"
     }
   ],
   "datafeeds": [
@@ -73,6 +77,11 @@
       "id": "datafeed-auth_rare_user",
       "file": "datafeed_auth_rare_user.json",
       "job_id": "auth_rare_user"
+    },
+    {
+      "id": "datafeed-suspicious_login_activity_ecs",
+      "file": "datafeed_suspicious_login_activity_ecs.json",
+      "job_id": "suspicious_login_activity_ecs"
     }
   ]
 }
diff --git a/...tafeed_suspicious_login_activity_ecs.json → ...tafeed_suspicious_login_activity_ecs.json b/...tafeed_suspicious_login_activity_ecs.json → ...tafeed_suspicious_login_activity_ecs.json
diff --git a/...uth/ml/suspicious_login_activity_ecs.json → ...uth/ml/suspicious_login_activity_ecs.json b/...uth/ml/suspicious_login_activity_ecs.json → ...uth/ml/suspicious_login_activity_ecs.json
diff --git a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_linux/logo.json b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_linux/logo.json
@@ -1,3 +1,3 @@
 {
   "icon": "logoSecurity"
-}
+}