From d5151b951c9524758c3a63e8d39f7828a2405dc8 Mon Sep 17 00:00:00 2001
From: Adrian Serrano <adrisr83@gmail.com>
Date: Tue, 14 Jan 2020 20:45:17 +0100
Subject: [PATCH] Fix use of wrong fields in Cisco ASA dashboard

This dashboard wasn't updated after a couple of fields were renamed.

Fixes: #15420
---
 CHANGELOG.next.asciidoc                                       | 1 +
 .../cisco/_meta/kibana/7/dashboard/Filebeat-Cisco-ASA.json    | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
index 688b530b89e..f7d17594b09 100644
--- a/CHANGELOG.next.asciidoc
+++ b/CHANGELOG.next.asciidoc
@@ -230,6 +230,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Fix SSL config in input.yml for Filebeat httpjson input in the MISP module. {pull}14767[14767]
 - Check content-type when creating new reader in s3 input. {pull}15252[15252] {issue}15225[15225]
 - Fix session reset detection and a crash in Netflow input. {pull}14904[14904]
+- Fixed dashboard for Cisco ASA Firewall. {issue}15420[15420]
 
 *Heartbeat*
 
diff --git a/x-pack/filebeat/module/cisco/_meta/kibana/7/dashboard/Filebeat-Cisco-ASA.json b/x-pack/filebeat/module/cisco/_meta/kibana/7/dashboard/Filebeat-Cisco-ASA.json
index 5d50368c9f2..7a585fbf501 100644
--- a/x-pack/filebeat/module/cisco/_meta/kibana/7/dashboard/Filebeat-Cisco-ASA.json
+++ b/x-pack/filebeat/module/cisco/_meta/kibana/7/dashboard/Filebeat-Cisco-ASA.json
@@ -764,7 +764,7 @@
               "id": "2",
               "params": {
                 "customLabel": "ACL ID",
-                "field": "cisco.asa.list_id",
+                "field": "cisco.asa.rule_name",
                 "missingBucket": false,
                 "missingBucketLabel": "Missing",
                 "order": "desc",
@@ -878,7 +878,7 @@
               "params": {
                 "aggregate": "concat",
                 "customLabel": "Sample message",
-                "field": "log.original",
+                "field": "event.original",
                 "size": 1,
                 "sortField": "@timestamp",
                 "sortOrder": "desc"