Skip to content

Commit 6e8e93e

Browse files
authored
Update cloudtrail.md
1 parent 7861179 commit 6e8e93e

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

docs/integrations/amazon-aws/cloudtrail.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -83,11 +83,11 @@ Once you begin uploading data, your daily data usage will increase. It's a good
8383
### Field Extraction Template
8484

8585
```sql
86-
| parse "\"sourceIPAddress\":\"*\"" as source_ipaddress
87-
| parse "\"eventName\":\"*\"" as event_name
88-
| parse "\"eventSource\":\"*\"" as event_source
89-
| parse "\"awsRegion\":\"*\"" as aws_Region
90-
| parse "\"userName\":\"*\"" as user
86+
| parse "\"sourceIPAddress\":\"*\"" as source_ipaddress nodrop
87+
| parse "\"eventName\":\"*\"" as event_name nodrop
88+
| parse "\"eventSource\":\"*\"" as event_source nodrop
89+
| parse "\"awsRegion\":\"*\"" as aws_Region nodrop
90+
| parse "\"userName\":\"*\"" as user nodrop
9191
```
9292

9393

@@ -309,4 +309,4 @@ See information about S3 public objects and buckets, including counts of new pub
309309
## Additional resources
310310

311311
* Blog: [What is AWS CloudTrail?](https://www.sumologic.com/blog/what-is-aws-cloudtrail/)
312-
* App description: [Logs for Security app for AWS CloudTrail](https://www.sumologic.com/application/aws-cloudtrail/)
312+
* App description: [Logs for Security app for AWS CloudTrail](https://www.sumologic.com/application/aws-cloudtrail/)

0 commit comments

Comments
 (0)