Elastic

Forward JSON events to Elastic using your preferred collector.

Useful fields

• @timestamp
• event.action
• http.request.method
• url.path
• source.ip
• rule.id
• vna.module
• vna.reason

Example queries

event.action: BLOCK
vna.module: waf
http.response.status_code >= 500