SIEM Network Map Errors

Lin2020 · March 5, 2021, 3:24pm

The error on the map is "The Source Point and Destination Point no results found"

and

SIEM-Network-Flows: Autonomous system, Bytes in, Bytes out....no items displayed

Discover error-firewall logs

ylasri · March 16, 2021, 5:49pm

You have to make sure fields of your logs are mapped correctly to the ECS schema with the right mapping,

Here is the reference to the source & destination fields of the ECS schéma

You can use logstash geoip filter to add ASN infos about src/dst IP

system · April 13, 2021, 5:49pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.