Problem with Fields From_adress To_adress SIEM-MEG
I have a problem with ESM from SIEM. I have logs from Email Gateway, and there are fields "From_Adress" and "To_Adress" that are automatically recognized from SIEM. When I try to create a new view and make a bar chart from this fields, this fields don't appear.
This fields are from McAfee, I don't understand this situation, because I have some parsing rules created and new custom types fields, and I can make bar chart with that.
Re: Problem with Fields From_adress To_adress SIEM-MEG
What do you mean by they don't appear, on the dashboard filter on the top there is option to show the additional filters, Even the new custom types you created will appear same applies to the reporting section: