Skip to content

NetFlow Records Integration: Append Network Address Translation IP fields to related.ip #9202

Closed
#11193
Closed
NetFlow Records Integration: Append Network Address Translation IP fields to related.ip#9202
#11193
Assignees
aleksmaus
Labels
Integration:netflowNetFlow RecordsTeam:Security-Deployment and DevicesDEPRECATED Deployment and Devices Security team [elastic/sec-deployment-and-devices]enhancementNew feature or request

Description

@kenmaina
kenmaina
opened on Feb 20, 2024

Append netflow.*_ipv4_address [ e.g. netflow.post_nat_destination_ipv4_address , netflow.post_nat_source_ipv4_address] to related.ip field. Currently only source.ip and destination.ip fields are included in the field.

Netflow Source: Cisco ASA

Metadata

Metadata

Assignees

Labels

Integration:netflowNetFlow RecordsTeam:Security-Deployment and DevicesDEPRECATED Deployment and Devices Security team [elastic/sec-deployment-and-devices]enhancementNew feature or request

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions