1 Reply Latest reply on Sep 2, 2014 2:45 AM by alexander_h

    Problem with Fields From_adress To_adress SIEM-MEG

    layer0

      Hello

       

      I have a problem with ESM from SIEM. I have logs from Email Gateway, and there  are fields "From_Adress" and "To_Adress" that are automatically recognized from SIEM. When I try to create a new view and make a bar chart from this fields, this fields don't appear.
       
      This fields are from McAfee, I don't understand this situation, because I have some parsing rules created and new custom types fields, and I can make bar chart with that.


      Thanks