[Cisco Duo]: Authentication dashboard not filtering for Duo Auth Logs

[btrieger]

Integration Name

Cisco Duo [cisco_duo]

Dataset Name

cisco_duo.auth

Integration Version

2.7.0

Agent Version

9.1.5

Agent Output Type

elasticsearch

Elasticsearch Version

9.1.5

OS Version and Architecture

Agentless

Software/API Version

No response

Error Message

No response

Event Original

No response

What did you do?

I opened up the kibana dashboard that came with the cisco duo dashboard for authentication.

What did you see?

I noticed several of the panels were not correctly filtering to look at cisco_duo.auth dataset and were looking at all of logs-*.

What did you expect to see?

I expect the cisco duo dashboard to only look at cisco duo logs.

Anything else?

No response

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[efd6]

@btrieger Can you show a screenshot of the dashboard illustrating this issue? There should be a dashboard-wide filter for the data stream present as seen in this screenshot of a fresh install.

We should be filtering in the visualisations instead of on the dashboard as a whole, but that is enhancement that we should be applying to all dashboards that use dashboard-level fitering.