# Empty DNS Fields and Tables in Network View

**URL:** <https://discuss.elastic.co/t/empty-dns-fields-and-tables-in-network-view/192285>\
**Category:** SIEM\
**Created:** [July 25, 2019, 4:11pm UTC](https://discuss.elastic.co/t/empty-dns-fields-and-tables-in-network-view/192285 "2019-07-25T16:11:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pepperhat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pepperhat/32/26586_2.png) [@pepperhat](https://discuss.elastic.co/u/pepperhat)\
**Post date:** [July 25, 2019, 4:11pm UTC](https://discuss.elastic.co/t/empty-dns-fields-and-tables-in-network-view/192285/1 "2019-07-25T16:11:13Z")

</div>

I have working with the new SIEM module in 7.2 and have been consuming Suricata data with the filebeat module. When reviewing the data in the SIEM view, some fields and tables are empty, where I would expect data to show up.

We have quite a bit of DNS traffic being analyzed by Suricata, and this data shows up in other sections of Kibana. Please let me know if there are troubleshooting steps I can take to resolve this, or if I'm misunderstanding what data should be in these fields.

 ![error](https://us1.discourse-cdn.com/elastic/original/3X/c/8/c89d46327c468fc23bc1c15f247b751fe3dc41ff.png)

Thanks!

---

<div class="post-metadata">

**Author:** ![cwurm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwurm/32/34882_2.png) [@cwurm](https://discuss.elastic.co/u/cwurm)\
**Post date:** [July 30, 2019, 8:21am UTC](https://discuss.elastic.co/t/empty-dns-fields-and-tables-in-network-view/192285/2 "2019-07-30T08:21:02Z")

</div>

Hi @pepperhat - the Filebeat Suricata module does not fill most of these fields. I don't think DNS logs from Suricata contain things like packets and bytes?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 27, 2019, 8:21am UTC](https://discuss.elastic.co/t/empty-dns-fields-and-tables-in-network-view/192285/3 "2019-08-27T08:21:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.