2015-08-20 09:26 AM
Hello Everyone,
I am are creating a dashoboard to display the Proxy connections.
We have created a List for the one's which are whitelisted by our organization.
The challenge that I am facing here is with to whitelist the proxy server.
The rule is working perfectly fine when the particular proxy server is not added to the list.
The proxy server is listed on meta 'alias.host' and 'event.source'. I have tried all the posibilities to eliminate the proxy from these two meta keys.
It would be really kind if anyone could help me on this.
Kind Regards,
Deepanshu Sood
2015-08-24 03:24 AM
Trying to make sense out of it but, I can't seem to properly visualize what your trying to do.