系统软件包数据集
编辑系统软件包数据集
编辑这是系统模块的package数据集。
它适用于使用 dpkg 或 rpm 作为其包管理器的 Linux 发行版，以及 macOS (Darwin) 上的 Homebrew。
示例仪表板
编辑该数据集附带一个示例仪表板。
字段
编辑有关数据集中每个字段的描述，请参阅导出字段部分。
这是一个由该数据集生成的示例文档。
{
"@timestamp": "2017-10-12T08:05:34.853Z",
"event": {
"action": "existing_package",
"category": [
"package"
],
"dataset": "package",
"id": "6bed65c5-9797-4fb7-9ec7-2d1873c54371",
"kind": "state",
"module": "system",
"type": [
"info"
]
},
"message": "Package zstd (1.5.4) is already installed",
"package": {
"description": "Zstandard is a real-time compression algorithm",
"installed": "2023-02-15T20:40:24.390086982-05:00",
"name": "zstd",
"reference": "https://facebook.github.io/zstd/",
"type": "brew",
"version": "1.5.4"
},
"service": {
"type": "system"
},
"system": {
"audit": {
"package": {
"entity_id": "SxYD3ZMh/Ym0lBIk",
"installtime": "2023-02-15T20:40:24.390086982-05:00",
"name": "zstd",
"summary": "Zstandard is a real-time compression algorithm",
"url": "https://facebook.github.io/zstd/",
"version": "1.5.4"
}
}
}
}