You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi all,
I once opened an Issue in 2019 here (elastic/beats#14933) regarding to elastic/beats#13920 , which unfortunately did not get much attention yet.
So I am not sure, if the issue is correctly placed here. But while changing to Fleets, this issue still exists and unfortunately there is no option to define processors (yet?). So maybe this should be kept in mind for further planning with the fleets integrations and can maybe speed up the main problem a little :)
Cheers,
Marcus
The text was updated successfully, but these errors were encountered:
MarcusCaepio
changed the title
Cisco Integrations: host.name should be "Agent Name"
Cisco Integrations: host.name should not be "Agent Name"
Feb 23, 2021
I close this issue, because I just realised, that with the correct syslog config, the ASA hostname is parsed to the field host.hostname.
If anyone get this problem, too, my ASA config is:
Facility Code 4(20)
Timestamps enabled with RFC5424
Enable Syslog DeviceID (Host or contextname)
NO Emblem Message Format
Hi all,
I once opened an Issue in 2019 here (elastic/beats#14933) regarding to elastic/beats#13920 , which unfortunately did not get much attention yet.
So I am not sure, if the issue is correctly placed here. But while changing to Fleets, this issue still exists and unfortunately there is no option to define processors (yet?). So maybe this should be kept in mind for further planning with the fleets integrations and can maybe speed up the main problem a little :)
Cheers,
Marcus
The text was updated successfully, but these errors were encountered: