Changed from user to principal_email

log2timeline · Dec 26, 2024 · 7e941b3 · 7e941b3
1 parent fbf7090
commit 7e941b3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/plaso/data/formatters/generic.yaml b/plaso/data/formatters/generic.yaml
@@ -352,12 +352,12 @@ type: 'conditional'
 data_type: 'gcp:log:entry'
 message:
 - '{text_payload}'
-- 'User {user}'
+- 'User {principal_email}'
 - 'performed {event_subtype}'
 - 'on {resource_name}'
 short_message:
 - '{text_payload}'
-- 'User {user}'
+- 'User {principal_email}'
 - 'performed {event_subtype}'
 - 'on {resource_name}'
 short_source: 'LOG'