• Support
  • Forums
  • Blogs
A New Community Experience is Coming! For more information, please see our announcement.

Network shows 0 events despite events being visible in SIEM

cuzimbobcuzimbob

New Life Form
I have an OSSIM server setup as a single sensor/server and have pfSense fwd'ing snort logs via Barnyard2 to the syslog side of OSSIM.  I have multiple networks with their own private IP space and each Snort device has it's own IP.  All of these IPs show up in the SIEM, but when I setup a Network under the Assets tab no events appear.  

What exactly is network looking at to determine which network it came from?  

How do I configure OSSIM to identify those networks?

Share post:

Sign In or Register to comment.