adjust auditd rules for ISO environments (cisagov#761)

mmguero · mmguero · commit 6224d89cdcc5 · 2025-09-02T19:57:56.000Z
diff --git a/dashboards/templates/composable/component/miscbeat.json b/dashboards/templates/composable/component/miscbeat.json
@@ -694,6 +694,9 @@
                 "sgid": {
                   "type": "keyword"
                 },
+                "subj": {
+                  "type": "keyword"
+                },
                 "success": {
                   "type": "keyword"
                 },
