Unable to see DNS queries though it shows count

Elastic Security Endpoint Security
1

Hi Team,

My elastic stack version is 7.15 and have windows AD which has DNS roles on it. I configured the SIEM APP and enrolled the server with elastic agent and fleet server. However in Security App/Kibana under Network I see DNS queries only count but unable to see the exact queries been used. Am I missing anything?

2

You may want to ask this question in another section of the forums as this section deals mostly with logstash.

3

Oops!! My bad. I will do that accordingly

Thanks for heads up.