From 86fe805fc56df5f00338ecc38b895ec682f4e2d9 Mon Sep 17 00:00:00 2001
From: "opensearch-trigger-bot[bot]"
 <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com>
Date: Tue, 10 Jan 2023 18:12:09 -0800
Subject: [PATCH] correct linux mapping error (#263) (#274)

Signed-off-by: Grant Haywood <grant@phaseshift.studio>
---
 src/main/resources/OSMapping/linux/mappings.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/resources/OSMapping/linux/mappings.json b/src/main/resources/OSMapping/linux/mappings.json
index 5bbc47276..17fb80188 100644
--- a/src/main/resources/OSMapping/linux/mappings.json
+++ b/src/main/resources/OSMapping/linux/mappings.json
@@ -21,7 +21,7 @@
       "type": "alias"
     },
     "system-auth-user": {
-      "path": "auditd.log.exe",
+      "path": "system.auth.user",
       "type": "alias"
     },
     "process-exe": {