NetFlow Records Integration: Append Network Address Translation IP fields to related.ip

elastic / integrations

Elastic Integrations

https://www.elastic.co/integrations

Other

21 stars 435 forks source link

NetFlow Records Integration: Append Network Address Translation IP fields to related.ip #9202

Closed kenmaina closed 1 month ago

kenmaina commented 8 months ago

Append netflow.*_ipv4_address [ e.g. netflow.post_nat_destination_ipv4_address , netflow.post_nat_source_ipv4_address] to related.ip field. Currently only source.ip and destination.ip fields are included in the field.

Netflow Source: Cisco ASA

elasticmachine commented 7 months ago

Pinging @elastic/sec-deployment-and-devices (Team:Security-Deployment and Devices)