Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Packetbeat] Visualizations of the NFS ECS dashboard use a wrong filter #19547

Closed
fdartayre opened this issue Jul 1, 2020 · 3 comments
Closed

Comments

@fdartayre
Copy link
Contributor

fdartayre commented Jul 1, 2020

Visualizations of the Packetbeat-nfs dashboard use a match value nfs-ecs for event.dataset when it should be nfs:

"query": {
  "match": {
    "event.dataset": {
      "query": "nfs-ecs",
      "type": "phrase"
    }
  }
}

The value of event.dataset is set to nfs in request_handler.go:

pbf.Event.Dataset = "nfs"

As a result the dashboard comes empty. This discrepancy seems to have been introduced by #9998 so it's there since the very beginning of 7.0.0.

@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Jul 1, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/siem (Team:SIEM)

@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Jul 2, 2020
@Dave-c-Ross
Copy link

Any update or work around ?

@botelastic
Copy link

botelastic bot commented Oct 18, 2021

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants