I installed the pfsense integration, but I get this fields only:
I ship the pfsense logs to an ubuntu server and there I have installed the policy. The syslog server listens only to 9001 udp.
How do the agent knows which traffic is from pfsense? I see the logs imported in the kibana, but the dashboard is not working for me very well.
I should appreciate some help on that.