Ahh! That makes sense. I was confused because Filebeat shows zero in the Overview, but you are right. It is there.
Thanks Andrew. By the way, your webinar demonstration of setting up SIEM is very helpful.
Eric
1 Like