# SIEM Network Map Errors

**URL:** <https://discuss.elastic.co/t/siem-network-map-errors/266386>\
**Category:** Elastic Security\
**Tags:** ecs-elastic-common-schema\
**Created:** [March 5, 2021, 3:24pm UTC](https://discuss.elastic.co/t/siem-network-map-errors/266386 "2021-03-05T15:24:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Lin2020](https://avatars.discourse-cdn.com/v4/letter/l/57b2e6/32.png) [@Lin2020](https://discuss.elastic.co/u/Lin2020)\
**Post date:** [March 5, 2021, 3:24pm UTC](https://discuss.elastic.co/t/siem-network-map-errors/266386/1 "2021-03-05T15:24:47Z")

</div>

The error on the map is "The Source Point and Destination Point no results found"

and

SIEM-Network-Flows: Autonomous system, Bytes in, Bytes out....no items displayed

Discover error-firewall logs

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/9/b9310d3e316bce7b0021e5d6228df91e482d1fc2.png)

---

<div class="post-metadata">

**Author:** ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Post date:** [March 16, 2021, 5:49pm UTC](https://discuss.elastic.co/t/siem-network-map-errors/266386/2 "2021-03-16T17:49:42Z")

</div>

Hi @Lin2020

You have to make sure fields of your logs are mapped correctly to the ECS schema with the right mapping,

Here is the reference to the source & destination fields of the ECS schéma

> **[Source Fields | Elastic Common Schema (ECS) Reference \[1.8\] | Elastic](https://www.elastic.co/guide/en/ecs/current/ecs-source.html)**

> **[Destination Fields | Elastic Common Schema (ECS) Reference \[1.8\] | Elastic](https://www.elastic.co/guide/en/ecs/current/ecs-destination.html)**

You can use logstash geoip filter to add ASN infos about src/dst IP

> **[Geoip filter plugin | Logstash Reference \[7.11\] | Elastic](https://www.elastic.co/guide/en/logstash/current/plugins-filters-geoip.html)**

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 13, 2021, 5:49pm UTC](https://discuss.elastic.co/t/siem-network-map-errors/266386/3 "2021-04-13T17:49:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.