Closed essodjolo closed 12 months ago
Fields jumpcloud.event.changes.from and jumpcloud.event.changes.to are mapped as boolean but in some cases, the value there can be an object or a keyword.
jumpcloud.event.changes.from
jumpcloud.event.changes.to
boolean
object
keyword
More context in the linked ER below (private).
Pinging @elastic/security-external-integrations (Team:Security-External Integrations)
Fields
jumpcloud.event.changes.from
andjumpcloud.event.changes.to
are mapped asboolean
but in some cases, the value there can be anobject
or akeyword
.More context in the linked ER below (private).