Add file.size for Linux (#692)

* add file.size for Linux

* file.size for doc folder linux events

Author: stanek-michal

custom_documentation/doc/endpoint/file/linux/linux_file_create.md

@@ -32,6 +32,7 @@ This event is generated when a file is created.
 | file.hash.sha256 |
 | file.name |
 | file.path |
+| file.size |
 | group.Ext.real.id |
 | group.Ext.real.name |
 | group.id |

custom_documentation/doc/endpoint/file/linux/linux_file_delete.md

@@ -31,6 +31,7 @@ This event is generated when a file is deleted.
 | file.extension |
 | file.name |
 | file.path |
+| file.size |
 | group.Ext.real.id |
 | group.Ext.real.name |
 | group.id |

custom_documentation/doc/endpoint/file/linux/linux_file_rename.md

@@ -35,6 +35,7 @@ This event is generated when a file is renamed.
 | file.hash.sha256 |
 | file.name |
 | file.path |
+| file.size |
 | group.Ext.real.id |
 | group.Ext.real.name |
 | group.id |

custom_documentation/src/endpoint/data_stream/file/linux/linux_file_create.yaml

@@ -37,6 +37,7 @@ fields:
   - file.hash.sha256
   - file.name
   - file.path
+  - file.size
   - group.Ext.real.id
   - group.Ext.real.name
   - group.id

custom_documentation/src/endpoint/data_stream/file/linux/linux_file_delete.yaml

@@ -36,6 +36,7 @@ fields:
   - file.extension
   - file.name
   - file.path
+  - file.size
   - group.Ext.real.id
   - group.Ext.real.name
   - group.id

custom_documentation/src/endpoint/data_stream/file/linux/linux_file_rename.yaml

@@ -40,6 +40,7 @@ fields:
   - file.hash.sha256
   - file.name
   - file.path
+  - file.size
   - group.Ext.real.id
   - group.Ext.real.name
   - group.id