Dear people, I have an ELK 7.8.0 server running OK.
I've setup the Cisco ASA module in filebeat and all the ASA logs are coming OK to my ELK server on port UDP/514. I can see the ASA lohgs in Discover and SIEM Netwotk tab.
But when I go to Kibana --> Observavility --> Logs I see a lot of error messages:
But when I go to Kibana --> Discover, at cisco.asa error times I can't see any syslog message, so I think Kibana can't retrieve Cisco ASA logs at those times for any reason I don't know.
My cisco module is this:
- module: cisco
What can be the problem? Can you help me please?
Special thanks !!!