Kibana doesn't show source IPs with a Count value less than 5 #6408
-
But in Hunt I see them. Those IPs are important and could be lost by looking only to Kibana. How to ensure that all information from PCAP is available in Kibana? Thanks (SO distributed v2.3.61) |
Beta Was this translation helpful? Give feedback.
Answered by
dougburks
Dec 2, 2021
Replies: 1 comment 1 reply
-
I suspect this may be due to the configuration of whatever visualization you're looking at as it may be limiting its result set. On the visualization, select the |
Beta Was this translation helpful? Give feedback.
1 reply
Answer selected by
OleksandrBolshov
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I suspect this may be due to the configuration of whatever visualization you're looking at as it may be limiting its result set. On the visualization, select the
Inspect
option and then go toRequest
. You'll most likely see something like"size": 100
which would limit it to showing the top 100 IPs.