Hello Everyone - Hoping I have a simple solution. Testing out Elastic Stack with Palo Alto syslogs, and running into issues with GeoIP's and combining the lon/lat to use Maps in Kibana. Not sure what else needs to be done in order to get this to work. It's been a few months and I've moved away fr…

Palo Alto Networks - Logstash > Elastic > Kibana

Badger June 6, 2023, 8:46pm 5

I'd start with a template to tell elasticsearch that that field is a geo_point.

Topic		Replies	Views
Palo alto sent to server via syslog Logstash	1	1040	November 15, 2022
Logstash TCP Zero Window - Palo Alto logs Logstash	4	938	February 22, 2022
Multiple syslog input into logstash Logstash	3	949	November 8, 2022
Panw.panos TCP grok errors Logstash	1	224	February 9, 2024
Elastic Parsing Elasticsearch	2	871	January 6, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Palo Alto Networks - Logstash > Elastic > Kibana

Related Topics