Hi,
I have just seen at https://www.elastic.co/guide/en/beats/filebeat/7.x/exported-fields-fortinet.html that a lot of rsa fields are now exported. What information do they provide which are not part of fortinet or ECE fields? @ruflin
Did you mean ECS?
I guess @adrisr is a much better fit to answer this one.
Yes, ECS of course.