Hi there, I have already connected my Sonicwall firewall to Elastic Cloud (I'm in the trial). I can see the logs in Kibana, but Elastic Security SIEM doesn't recognize the Firewall as a host, so I it doesn't get the logs inside the security app. Here is a log seen from Kibana, I think the ECS form…

Sonicwall firewall SIEM

adrisr (Adrian Serrano) October 7, 2020, 10:10am 12

Can you share the whole document in JSON format?

Topic		Replies	Views
SIEM Hosts / Networks and Data Not Showing Up SIEM	5	1712	March 18, 2020
Elastic SIEM integration with Palo Alto Network FIrewall Beats filebeat	1	528	December 27, 2019
What are the essential ecs items in elastic siem? Elastic Security	11	568	November 4, 2022
SonicWall Firewall and SIEM or SNMP SIEM	2	2331	October 13, 2019
Filebeat Fortinet Module + Kibana SIEM Beats filebeat	11	1706	August 11, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Sonicwall firewall SIEM

Related topics