Resolved log pipeline failures

Author: mauneel-sorathia

microsoft_sysmon/assets/logs/microsoft-sysmon.yaml

@@ -3,9 +3,49 @@ metric_id: microsoft-sysmon
 backend_only: false
 facets:
   - groups:
-      - User
-    name: User Name
-    path: usr.name
+      - DNS
+    name: Answer Name
+    path: dns.answer.name
+    source: log
+  - groups:
+      - DNS
+    name: Question Name
+    path: dns.question.name
+    source: log
+  - groups:
+      - Geoip
+    name: City Name
+    path: network.client.geoip.city.name
+    source: log
+  - groups:
+      - Geoip
+    name: Continent Code
+    path: network.client.geoip.continent.code
+    source: log
+  - groups:
+      - Geoip
+    name: Continent Name
+    path: network.client.geoip.continent.name
+    source: log
+  - groups:
+      - Geoip
+    name: Country ISO Code
+    path: network.client.geoip.country.iso_code
+    source: log
+  - groups:
+      - Geoip
+    name: Country Name
+    path: network.client.geoip.country.name
+    source: log
+  - groups:
+      - Geoip
+    name: Subdivision ISO Code
+    path: network.client.geoip.subdivision.iso_code
+    source: log
+  - groups:
+      - Geoip
+    name: Subdivision Name
+    path: network.client.geoip.subdivision.name
     source: log
   - groups:
       - Web Access
@@ -14,28 +54,58 @@ facets:
     source: log
   - groups:
       - Web Access
-    name: Destination IP
-    path: network.destination.ip
+    name: Client Port
+    path: network.client.port
+    source: log
+  - groups:
+      - Geoip
+    name: Destination City Name
+    path: network.destination.geoip.city.name
+    source: log
+  - groups:
+      - Geoip
+    name: Destination Continent Code
+    path: network.destination.geoip.continent.code
+    source: log
+  - groups:
+      - Geoip
+    name: Destination Continent Name
+    path: network.destination.geoip.continent.name
+    source: log
+  - groups:
+      - Geoip
+    name: Destination Country ISO Code
+    path: network.destination.geoip.country.iso_code
+    source: log
+  - groups:
+      - Geoip
+    name: Destination Country Name
+    path: network.destination.geoip.country.name
+    source: log
+  - groups:
+      - Geoip
+    name: Destination Subdivision ISO Code
+    path: network.destination.geoip.subdivision.iso_code
+    source: log
+  - groups:
+      - Geoip
+    name: Destination Subdivision Name
+    path: network.destination.geoip.subdivision.name
     source: log
   - groups:
       - Web Access
-    name: Client Port
-    path: network.client.port
+    name: Destination IP
+    path: network.destination.ip
     source: log
   - groups:
       - Web Access
     name: Destination Port
     path: network.destination.port
     source: log
   - groups:
-      - DNS
-    name: Question Name
-    path: dns.question.name
-    source: log
-  - groups:
-      - DNS
-    name: Answer Name
-    path: dns.answer.name
+      - User
+    name: User Name
+    path: usr.name
     source: log
 pipeline:
   type: pipeline