fix(audit): timestamp field to first in log

audit/types.go

@@ -10,13 +10,13 @@ import (
 // entry represents an audit entry.
 // It could be an entry for a request or response.
 type entry struct {
+	Time          string    `json:"time,omitempty"`
 	Auth          *auth     `json:"auth,omitempty"`
 	Error         string    `json:"error,omitempty"`
 	Forwarded     bool      `json:"forwarded,omitempty"`
 	ForwardedFrom string    `json:"forwarded_from,omitempty"` // Populated in Enterprise when a request is forwarded
 	Request       *request  `json:"request,omitempty"`
 	Response      *response `json:"response,omitempty"`
-	Time          string    `json:"time,omitempty"`
 	Type          string    `json:"type,omitempty"`
 }
 

changelog/31437.txt

@@ -0,0 +1,3 @@
+```release-note:change
+audit: Log entry fields are reorganized so time is the first field, which is useful for log parsers and forwarders for accurate timestamps of events.
+```