Is there a way to query/filter for just RFC Non-Compliant Traffic?

Elastic Stack Kibana
1

I was unable to come up with a come up with anything. Any ideas?

2

Do you have firewall logs ingested in Elasticsearch? Do the logs have data regarding RFC Non-Compliance?

4

I am using Amazon's Elastiservice and only have access to Kibana. The logs state "Non-RFC Compliance", but I wasnt to view just those.

5

Well, if you search for that data in Discover, there it will be :slight_smile: