System.auth.ssh.event field not created

Elastic Stack Elastic Agent
1

I installed "System" Integration into a policy.
however ssh dashboard is not working.

image
image3334×1516 265 KB

image
image3328×1554 251 KB

[root@elastic-agent-8-nis elastic-agent-8.7.1-linux-x86_64]# sudo elastic-agent status
State: HEALTHY
Message: Running
Fleet State: HEALTHY
Fleet Message: (no message)
Components:
  * http/metrics    (HEALTHY)
                    Healthy: communicating with pid '3835'
  * filestream      (HEALTHY)
                    Healthy: communicating with pid '3843'
  * beat/metrics    (HEALTHY)
                    Healthy: communicating with pid '3850'
  * endpoint        (HEALTHY)
                    Healthy: communicating with endpoint service
  * log             (HEALTHY)
                    Healthy: communicating with pid '3813'
  * system/metrics  (HEALTHY)
                    Healthy: communicating with pid '3819'
  * audit/system    (HEALTHY)
                    Healthy: communicating with pid '3826'
[root@elastic-agent-8-nis elastic-agent-8.7.1-linux-x86_64]#
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.