I am new McAfee Nitro, I have integrated WAF with ESM. I want to monitor the top attack against web application in dashboard view.
When I created a view for event summery and looked for it's destination IP address.
It's showing application server IP address.
But I need to map those IP's with application URL. So in view it should show Application name or it's URL with top attacks.
Looking after for Host name is not resolving my problem. It's showing some other DNS pointer for application. I have internal IP's address for monitoring web application with me.
I using Nitro version 9.5.0.
Can you please help me do same.
Moved provisionally to SIEM for better response.