Bug in ECS GeoIP inside alert

jasonish / evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

https://evebox.org/

MIT License

417 stars 67 forks source link

Closed ngms17 closed 1 year ago

ngms17 commented 1 year ago

Hi,

Inside the alerts information the ECS GeoIP "Source" field is always missing:

jasonish commented 1 year ago

Closing. 0.17.0 has changed this display some and this issue should be fixed there.