Hello Everyone - Hoping I have a simple solution. Testing out Elastic Stack with Palo Alto syslogs, and running into issues with GeoIP's and combining the lon/lat to use Maps in Kibana. Not sure what else needs to be done in order to get this to work. It's been a few months and I've moved away fr…

Palo Alto Networks - Logstash > Elastic > Kibana

Badger June 6, 2023, 8:46pm 5

I'd start with a template to tell elasticsearch that that field is a geo_point.

Topic		Replies	Views
Palo alto sent to server via syslog Logstash	1	1056	November 15, 2022
Time of the log is 10 hours ahead in Kibana Logstash	1	244	June 24, 2020
Logstash TCP Zero Window - Palo Alto logs Logstash	4	949	February 22, 2022
Completely lost Logstash	6	1141	July 6, 2017
Multiple syslog input into logstash Logstash	3	968	November 8, 2022

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Palo Alto Networks - Logstash > Elastic > Kibana

Related topics