elastic / elastic/integrations
[Cisco ISE] Add geo data to cisco_ise.log.calling_station.id field in the Cisco ISE intergation.
Open
Crest
enhancement
Integration:cisco_ise
Stalled
Team:Security-Deployment and Devices
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 182
Description
The client field is enriched with geo data. The client field is most likely to be a RFC 1918 address and not have geo data associated with it. When a user logins to VPN the cisco_ise.log.calling_station.id is the field that contains the user's public IP and can have geo IP data tied to it.
Contributor guide
Assessment
This issue has not been assessed yet.