Hello, I am receiving alerts from SOPHOS in clear JSON, below is an example: {"end": "2017-11-15T21:35:18.000Z", "customer_id": "x", "endpoint_type": "computer", "dhost": "x", "type": "Event::Endpoint::WebControlViolation", "name": "'https://static.site24x7rum.com' warned due to category 'Alcohol & …

JSON filter, query

Christian_Dahlqvist (Christian Dahlqvist) November 16, 2017, 10:45am 4

Can you show what an event looks like once it is in Kibana (please cut and paste)?

Topic		Replies	Views
Can't use type in logstash conf file Logstash	3	431	May 3, 2017
How to filter Filebeat input in Logstash from different log? Logstash	2	2984	October 12, 2018
Filtering on beats fields issue Logstash	7	2256	September 5, 2017
Logstash output configuration for beat Logstash	3	630	July 6, 2017
Trouble with Json filtering Logstash	3	556	March 3, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

JSON filter, query

Related topics