Elasticsearch SIEM Dashboard

Elastic Security SIEM
1

Hi

I have a Cisco Firewall (ASA) logging data to Filebeats -> Logstash -> Elasticsearch. I can see the syslog data in "Discover" section however I do not have any output in SIEM section under Networks. How does the data get parsed into the SIEM dashboards?

Regards

2

I moved this post to the SIEM forum

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.