We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
action
1 parent f69485b commit b98036cCopy full SHA for b98036c
x-pack/docs/en/security/auditing/ignore-policy.asciidoc
@@ -23,7 +23,7 @@ accountability gaps that could render illegitimate actions undetectable.
23
Please take time to review these policies whenever your system architecture changes.
24
25
A policy is a named set of filter rules. Each filter rule applies to a single event attribute,
26
-one of the `users`, `realms`, `roles` or `indices` attributes. The filter rule defines
+one of the `users`, `realms`, `actions`, `roles` or `indices` attributes. The filter rule defines
27
a list of <<regexp-syntax,Lucene regexp>>, *any* of which has to match the value of the audit
28
event attribute for the rule to match.
29
A policy matches an event if *all* the rules comprising it match the event.
0 commit comments