From dbd25b358b97f0914f0bfba4c4ea483badf06d3b Mon Sep 17 00:00:00 2001
From: Andrew Kroh <andrew.kroh@elastic.co>
Date: Wed, 5 Apr 2017 11:18:51 -0400
Subject: [PATCH] Ignore audit fileset on macOS

Fixes #3918
---
 filebeat/module/system/audit/manifest.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/filebeat/module/system/audit/manifest.yml b/filebeat/module/system/audit/manifest.yml
index 5eb0b43f76c6..d5f35f5ac9bb 100644
--- a/filebeat/module/system/audit/manifest.yml
+++ b/filebeat/module/system/audit/manifest.yml
@@ -4,7 +4,7 @@ var:
   - name: paths
     default:
       - /var/log/audit/audit.log*
-    os.darwin: []
+    os.darwin: [""]
     os.windows: []
 
 ingest_pipeline: ingest/pipeline.json