Replies: 1 comment
-
Can you share an example parsed log? |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Version
2.4.60
Installation Method
Security Onion ISO image
Description
configuration
Installation Type
Distributed
Location
on-prem with Internet access
Hardware Specs
Exceeds minimum requirements
CPU
8 to 16 depending on node
RAM
16 or 32gb
Storage for /
512
Storage for /nsm
512
Network Traffic Collection
other (please provide detail below)
Network Traffic Speeds
1Gbps to 10Gbps
Status
Yes, all services on all nodes are running OK
Salt Status
No, there are no failures
Logs
No, there are no additional clues
Detail
I am importing a custom log using the csv processor to separate the fields.
I added the field event.category and set to network but any of the prebuilt dashboards are not seeing it.
same goes for agent.name
I am not understanding why a custom log data with the correct ECS field names are not showing in the dashboard.
Guidelines
Beta Was this translation helpful? Give feedback.
All reactions