Update docs

elastic · Sep 26, 2024 · 083df8f · 083df8f
1 parent 9efaf77
commit 083df8f
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/packages/aws/data_stream/cloudtrail/fields/fields.yml b/packages/aws/data_stream/cloudtrail/fields/fields.yml
@@ -189,8 +189,8 @@
             Additional insight details.
 - name: related.entity
   description: |
-    All the entity identifiers related to the document. If the document 
-    contains multiple entities, identifiers belonging to different entities 
-    will be present. Example identifiers include cloud resource IDs, ARNs, 
-    email addresses, or hostnames.
+   A collection of all entity identifiers associated with the document. 
+   If the document  contains multiple entities, identifiers for each will be included.
+   Example identifiers include(but not limited to) cloud resource IDs, ARNs,  email addresses,
+   and hostnames. 
   type: keyword
diff --git a/packages/aws/docs/cloudtrail.md b/packages/aws/docs/cloudtrail.md
@@ -133,7 +133,7 @@ Please refer to the following [document](https://www.elastic.co/guide/en/ecs/cur
 | host.os.codename | OS codename, if any. | keyword |
 | input.type | Input type | keyword |
 | log.offset | Log offset | long |
-| related.entity | All the entity identifiers related to the document. If the document  contains multiple entities, identifiers belonging to different entities  will be present. Example identifiers include cloud resource IDs, ARNs,  email addresses, or hostnames. | keyword |
+| related.entity | A collection of all entity identifiers associated with the document.  If the document  contains multiple entities, identifiers for each will be included. Example identifiers include(but not limited to) cloud resource IDs, ARNs,  email addresses, and hostnames. | keyword |
 
 
 An example event for `cloudtrail` looks as following: