FIX: Update dashboard and hunt query for firewall logs #12021

salt/soc/defaults.yaml

@@ -465,10 +465,9 @@ soc:
         - destination.ip
         - destination.port
         - network.transport
-        - network.direction
+        - network.type
         - observer.ingress.interface.name
         - event.action
-        - event.reason
         - network.community_id
       ':osquery:':
         - soc_timestamp