Modify Beats Output

Elastic Stack Beats
,
1

Hi There,

I have two queries regarding the beats event output

  1. If i install winlobeat and auditbeat on the same machine , In the SIEM host table i am getting two hosts as below (one with Just hostname and other with fqdn)

hostname1
hostname1.domain.com

How can i make it to one.

  1. In the SIEM events , we have three columns Field, Value & Description.

How can i remove the description column , will the description column takes some bytes for every event ?

siem_description
siem_description1124×289 75.8 KB

Please help

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.