EventManager: add more datetime placeholders

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
This commit is contained in:
Nicola Murino
2025-01-16 18:14:43 +01:00
parent 24215dc734
commit ef2f3e51ea
5 changed files with 40 additions and 0 deletions

View File

@@ -1078,6 +1078,11 @@
"role": "User or admin role",
"timestamp": "Event timestamp as nanoseconds since epoch",
"datetime": "Event timestamp formatted as YYYY-MM-DDTHH:MM:SS.ZZZ",
"year": "Event year formatted as four digits",
"month": "Event month formatted as two digits",
"day": "Event day formatted as two digits",
"hour": "Event hour formatted as two digits",
"minute": "Event minute formatted as two digits",
"email": "For filesystem events, this is the email associated with the user performing the action. For the provider events, this is the email associated with the affected user or admin. Blank in all other cases",
"object_data": "Provider object data serialized as JSON with sensitive fields removed",
"object_data_string": "Provider object data as JSON escaped string with sensitive fields removed",