Elastic SIEM Network Map Layers Issues

Elastic Security SIEM
1

Hello,

I have been experiencing some issues with Elastic SIEM Network Map Layers. I have configured only indices corporatepfw-ecs-* from which the SIEM app collects events. See the image below.

SIEM
SIEM1345×621 58.7 KB

However, In the SIEM > Network > Map Layers I still see more that on layer of indices, that is corporatepfw-ecs-* and corporatepfw-. In my configurations I have not configured corporatepfw- in SIEM. See the image below.

Map
Map1345×583 137 KB

Kindly assist on how to remove the indices corporatepfw-* in the SIEM > Network > Map Layers. I do not wish to delete the indices corporatepfw-*.

Thanks!
Frank

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.