I have two queries regarding the beats event output
- If i install winlobeat and auditbeat on the same machine , In the SIEM host table i am getting two hosts as below (one with Just hostname and other with fqdn)
How can i make it to one.
- In the SIEM events , we have three columns Field, Value & Description.
How can i remove the description column , will the description column takes some bytes for every event ?