Hello community. I am having big issue right now. I have Integrated Fortigate and Elastic. Then attempted to integrate MISP to Elastic. Integration was well till [Logs MISP] Dashboard was thinking Total Indicators count is actually fortigate logs.( screenshot 1) When I click to “explore in discov…

screenshot 2 ( Total Indicators view in discover session) [Screenshot_1]

Hi :waving_hand: 4l13v I think what you’re seeing is probably caused by the MISP dashboard querying the wrong data view, not because FortiGate logs are actually becoming MISP indicators. What I think is happening The [Logs MISP] dashboard is built to work only with MISP indicator documents. I…

[image] sdesalas: So I don’t really think that the dashboard is broken — it’s probably just not filtered to MISP data only. The dashboard is a Managed Dashboard, it is built by Elastic and it is part of the MISP integration, the user has no control over it and cannot edit the visualizations. …

Just opened an issue: [TI_MISP] Dashboard visualization showing data from other datasets and not showing MISP data · Issue #17524 · elastic/integrations · GitHub

Hi Leandro. You’re right, I didnt realize this was a dashboard for a managed integration. Thanks for creating bug ticket :folded_hands: . I can see this has been assigned to the Security Integrations teams which would be the team responsible.

Elastic - MISP Integration shows total Indicators ( fortigate logs)

Elastic Security SIEM

system (system) Closed March 24, 2026, 11:08am 7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Elastic-agent with Misp integration policy no data received while no errors comes up Elastic Agent	9	1464	April 19, 2023
Dashboard MISP Beats beats-module , filebeat	1	354	September 6, 2022
Bug: No Misp event data send to Kibana when Threat intel module used Beats beats-module , filebeat	6	1100	April 19, 2023
Cannot index event publisher.Event Beats fleet , filebeat , elastic-agent	2	607	July 7, 2022
Fortigate Integrations SIEM	9	1084	October 10, 2024

Elastic - MISP Integration shows total Indicators ( fortigate logs)

Related topics