I have an OSSIM server setup as a single sensor/server and have pfSense fwd'ing snort logs via Barnyard2 to the syslog side of OSSIM. I have multiple networks with their own private IP space and each Snort device has it's own IP. All of these IPs show up in the SIEM, but when I setup a Network under the Assets tab no events appear.
What exactly is network looking at to determine which network it came from?
How do I configure OSSIM to identify those networks?