cancel
Showing results for 
Search instead for 
Did you mean: 
layer0
Level 7
Report Inappropriate Content
Message 1 of 2

Problem with Fields From_adress To_adress SIEM-MEG

Hello

I have a problem with ESM from SIEM. I have logs from Email Gateway, and there  are fields "From_Adress" and "To_Adress" that are automatically recognized from SIEM. When I try to create a new view and make a bar chart from this fields, this fields don't appear.
 
This fields are from McAfee, I don't understand this situation, because I have some parsing rules created and new custom types fields, and I can make bar chart with that.


Thanks

1 Reply

Re: Problem with Fields From_adress To_adress SIEM-MEG

What do you mean by they don't appear, on the dashboard filter on the top there is option to show the additional filters, Even the new custom types you created will appear same applies to the reporting section:filter2.PNG

Filter.PNG