WEF no hosts showing up in SIEM

Elastic Stack Beats
1

I'm using WEF and upgraded to 7.8, loaded the new template, followed some suggestions and added host.name

    function process(event) {
              event.Put("host.name", event.Get("winlog.computer_name"));
            }

...but I still don't have any hosts showing up in the SIEM? The host.name field is definitely working...is there anything else I can try?

Thanks!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.