Inquiries about warning fields

As you can see, I am going to set up an Alert, and I
The field name you set is not visible.
Fields starting with iso. are not visible, and fields starting with the changed forti_ are not visible.
How can I make this field name selectable in Alert settings?

  mutate { 
    rename => { 
        "" => "forti_fw_uptime" 
        "" => "forti_fw_use_cpu" 
        "" => "forti_fw_use_memory" 
        "" => "forti_fw_sessioncount" 

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.