Hi there, I have already connected my Sonicwall firewall to Elastic Cloud (I'm in the trial). I can see the logs in Kibana, but Elastic Security SIEM doesn't recognize the Firewall as a host, so I it doesn't get the logs inside the security app. Here is a log seen from Kibana, I think the ECS form…

Sonicwall firewall SIEM

arturo.mj (Arturo Martínez) October 6, 2020, 12:05pm 9

Yes. But as you can see here it doesn't get the info in the right way. Here there is a failed login attemp log, and Elastic doesn't understand it as it should.

Topic		Replies	Views
SIEM Hosts / Networks and Data Not Showing Up SIEM	5	1712	March 18, 2020
Elastic SIEM integration with Palo Alto Network FIrewall Beats filebeat	1	528	December 27, 2019
What are the essential ecs items in elastic siem? Elastic Security	11	568	November 4, 2022
SonicWall Firewall and SIEM or SNMP SIEM	2	2331	October 13, 2019
Filebeat Fortinet Module + Kibana SIEM Beats filebeat	11	1706	August 11, 2020

Sonicwall firewall SIEM

Related topics