issues with stock visualizations

13 views
Skip to first unread message

Hunter Goncalves

unread,
2:11 PM (8 hours ago) 2:11 PM
to Wazuh | Mailing List
hi all. I'm having issues with the stock visualizations. version is wazuh-dashboard v 4.13. I'm getting these types of errors with the dashboard visualizations for most of the things (Security operations, threat hunting, mitre attack pages, etc)

"Saved field "rule.mitre.tactic" is invalid for use with the "Terms" aggregation. Please select a new field." && "Saved field "rule.pci_dss" is invalid for use with the "Terms" aggregation. Please select a new field."

Juan Nicolás Asselle (Nico Asselle)

unread,
3:04 PM (8 hours ago) 3:04 PM
to Wazuh | Mailing List
Did you make any customizations to wazuh-templates.json? In that case, could you please share it with us?

Also, the following query at the Wazuh Indexer Dev Tool will provide us with valuable information to know what could be going wrong: GET _cat/templates
Reply all
Reply to author
Forward
0 new messages