Row Renderers, not rendering?


We have some Firewall data, that when viewed in the timeline, I'd expect the Flow row renderer to pick up and "beautify". I've attached a portion of the data for an example.

Can someone explain why this would not render?

Hey @bm11100 thanks for your question!

For the row renderers to work, the dataset needs to match the criteria for one of the renderers. The renderers are here:

Could you share one of the firewall events?

For example for the event to match the netflow renderer it must have the following criteria met:

event.category must equal network_traffic and event.action must equal network_flow or netflow_flow.

Thanks @Jonathan_Buttner, that is super helpful! We don't have those fields mapped in that way, so that would explain it.