Unable to add event filter exception

I'm trying to drop some events and I'm not able to select any fields in Security>manage>Event Filters
This is on 8.5.2 run in docker. No error is shown.

Hey @gyterpena ,

I think you should check your security integrations first and then check docs regarding filters creation.

If integrations are in place, the other reason could be missing user permissions: You must have the superuser built-in user role to access this feature.

Regards, Dima

Hello, thx for reply.
This was/is actually caused by
"Http.cpp:327 CURL error 60: Error [SSL: no alternative certificate subject name matches target host name 'XXX.XXX.XXX.XXX']"

Basically, docker-compose.yml only creates cert for 127.0.0.1.

I'm unable to set "windows|Linux|Mac.advanced.elasticsearch.tls.verify_hostname" under defend advanced settings to false as it needs platinum license.

Hey @gyterpena

I can only reference the detailed comparison of licences, so you can see what is available for you in a Basic one.

Regards, Dima

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.