diff --git a/src/main/resources/OSMapping/linux/mappings.json b/src/main/resources/OSMapping/linux/mappings.json
index 5bbc47276..17fb80188 100644
--- a/src/main/resources/OSMapping/linux/mappings.json
+++ b/src/main/resources/OSMapping/linux/mappings.json
@@ -21,7 +21,7 @@
       "type": "alias"
     },
     "system-auth-user": {
-      "path": "auditd.log.exe",
+      "path": "system.auth.user",
       "type": "alias"
     },
     "process-exe": {