I installed approximately 30 connectors. Then i created network, location and imported zone and some of assets.
After that operation i expect to see asset informations (attacker asset id, attacker zone id, target asset id etc.).
I see these information on some of the connector's log.
On firewall's log i can see all information about asset but on netflow connector i see only ip address (for the same asset)
I checked connector settings they are both same.
Connectors's network settings, assets's zone and category settings and etc. they are configured.
I dont know why i cant see asset information on some connector logs.
Thanks in advance
Yes I have. It is not /all networks/Arcsight System/local but it is my networks that i created.
These settings same for both connectors.
Hi, thanks for the quick answer.
Somehow i didnt see this pdf. It is very usefull and thanks to it i found what iam missing.
My mistake is that: i forget to select customer uri in connector settings. Which is in connector settings-->Default (tab)-->Network-->Customer Uri
Thank you Ruslan