Hi all,

At Filebeat 7.5.1 the imported Dashboard "[Filebeat Cisco] ASA Firewall" has a Visualization called "Top ACL by Blocked" which wants to access the field "cisco.asa.list_id".
Since Filebeat 7.4 this field is not valid anymore. It has to be "cisco.asa.rule_name" according to the docs at https://www.elastic.co/guide/en/beats/libbeat/master/breaking-changes-7.4.html

Cheers,
Marcus