# No TLS details

**URL:** <https://discuss.elastic.co/t/no-tls-details/222593>\
**Category:** SIEM\
**Created:** [March 8, 2020, 11:25am UTC](https://discuss.elastic.co/t/no-tls-details/222593 "2020-03-08T11:25:21Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![NogNeetMachinaal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nogneetmachinaal/32/58893_2.png) [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\
**Post date:** [March 8, 2020, 11:25am UTC](https://discuss.elastic.co/t/no-tls-details/222593/1 "2020-03-08T11:25:21Z")

</div>

See also attached image:

 ![SIEM - Empty TLS table](https://us1.discourse-cdn.com/elastic/original/3X/7/c/7c6d52bef1b6b120c433c80f67cdb638e34d2775.png)

While there seem to be thousands of TLS handshakes, the SIEM-network table with TLS details is empty.

The Packetbeat config details:

```auto
- type: tls
  # Configure the ports where to listen for TLS traffic. You can disable
  # the TLS protocol by commenting out the list of ports.
  ports: [443, 993, 587, 465, 995]

  # Certificate details
  # WLM | 2020mar8
  send_certificates: true
  include_raw_certificates: true
  include_detailed_fields: true
  fingerprints: [md5, sha1, sha256]
```

What am I overlooking here?

Thanks - Will

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [March 12, 2020, 3:57pm UTC](https://discuss.elastic.co/t/no-tls-details/222593/2 "2020-03-12T15:57:57Z")

</div>

> [@NogNeetMachinaal](#):
>
> What am I overlooking here?

Unfortunately, nothing. We've been working to standardize on Elastic Common Schema and transition the data sources and UI to be fully based on it. The queries in the UI predate TLS being part of the schema. And now it needs an update. I've opened an issue to get this done [[SIEM] Update TLS tables for ECS 1.4+ · Issue #60026 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/60026).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 9, 2020, 3:58pm UTC](https://discuss.elastic.co/t/no-tls-details/222593/3 "2020-04-09T15:58:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 9, 2020, 3:58pm UTC](https://discuss.elastic.co/t/no-tls-details/222593/4 "2020-04-09T15:58:03Z")

</div>



---

<div class="post-metadata">

**Author:** ![NogNeetMachinaal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nogneetmachinaal/32/58893_2.png) [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\
**Post date:** [August 31, 2020, 8:54pm UTC](https://discuss.elastic.co/t/no-tls-details/222593/5 "2020-08-31T20:54:11Z")

</div>

Perhaps somewhat late - but still - thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 7:48am UTC](https://discuss.elastic.co/t/no-tls-details/222593/6 "2022-11-04T07:48:20Z")

</div>