{"users":[{"id":60,"username":"warkolm","name":"Mark Walkom","avatar_template":"/user_avatar/discuss.elastic.co/warkolm/{size}/39224_2.png","trust_level":2},{"id":-1,"username":"system","name":"system","avatar_template":"https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png","admin":true,"moderator":true,"trust_level":4},{"id":12203,"username":"willemdh","name":"WillemDH","avatar_template":"/user_avatar/discuss.elastic.co/willemdh/{size}/16922_2.png","trust_level":2},{"id":34955,"username":"leandrojmp","name":"Leandro Pereira","avatar_template":"/user_avatar/discuss.elastic.co/leandrojmp/{size}/107231_2.png","flair_name":"elastic_certified","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/4/b/4b7ff6230ea5ae3c4c3f43b26e783b36ceea35b2.png","flair_color":"00BFB3","flair_group_id":46,"primary_group_name":"elastic_certified","trust_level":2},{"id":137383,"username":"Kseniiaign","name":"Kseniia Ignatovych","avatar_template":"/user_avatar/discuss.elastic.co/kseniiaign/{size}/105250_2.png","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"primary_group_name":"elastic_team","trust_level":4},{"id":164695,"username":"dot-mike","name":"","avatar_template":"/user_avatar/discuss.elastic.co/dot-mike/{size}/143339_2.png","trust_level":2},{"id":170990,"username":"dongnx","name":"Nguyen Xuan Dong","avatar_template":"/user_avatar/discuss.elastic.co/dongnx/{size}/148154_2.png","trust_level":0},{"id":171531,"username":"vas-vas777","name":"Vas Vas777","avatar_template":"/user_avatar/discuss.elastic.co/vas-vas777/{size}/148314_2.png","trust_level":0},{"id":125462,"username":"lesio","name":"Leszek Kubik","avatar_template":"/user_avatar/discuss.elastic.co/lesio/{size}/89323_2.png","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"primary_group_name":"elastic_team","trust_level":4},{"id":171557,"username":"JasperHedge","name":"Jasper Siegers","avatar_template":"/user_avatar/discuss.elastic.co/jasperhedge/{size}/148322_2.png","trust_level":0},{"id":167567,"username":"jatin3101","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/j/898d66/{size}.png","trust_level":1},{"id":171446,"username":"wessorh","name":"Rick Wesson","avatar_template":"/user_avatar/discuss.elastic.co/wessorh/{size}/148279_2.png","trust_level":0},{"id":153227,"username":"michael-a","name":"elastic-mike","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/c57346/{size}.png","trust_level":1},{"id":167889,"username":"RalphDibney","name":"Tobias","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/r/47e85d/{size}.png","trust_level":1},{"id":99262,"username":"NickFritts","name":"Nick Fritts","avatar_template":"/user_avatar/discuss.elastic.co/nickfritts/{size}/47189_2.png","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"primary_group_name":"elastic_team","trust_level":4},{"id":131250,"username":"marrc.rousseau","name":"Marc Rousseau","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/{size}.png","trust_level":2},{"id":170674,"username":"Shailesk","name":"Shailesh Kumar Singh","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/s/58956e/{size}.png","trust_level":0},{"id":167620,"username":"adamsmesher","name":"Adamsmesher","avatar_template":"/user_avatar/discuss.elastic.co/adamsmesher/{size}/146799_2.png","trust_level":1},{"id":170759,"username":"jedikeeper","name":null,"avatar_template":"/user_avatar/discuss.elastic.co/jedikeeper/{size}/148053_2.png","trust_level":1},{"id":84308,"username":"stephenb","name":"Stephen Brown","avatar_template":"/user_avatar/discuss.elastic.co/stephenb/{size}/40856_2.png","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"primary_group_name":"elastic_team","moderator":true,"trust_level":4},{"id":169696,"username":"jumpingrock","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/j/9d8465/{size}.png","trust_level":0},{"id":169700,"username":"Konrad_Szwarc","name":"Konrad Szwarc","avatar_template":"/user_avatar/discuss.elastic.co/konrad_szwarc/{size}/147889_2.png","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"primary_group_name":"elastic_team","trust_level":4},{"id":169666,"username":"davidwarner44","name":"davidwarne","avatar_template":"/user_avatar/discuss.elastic.co/davidwarner44/{size}/147872_2.png","trust_level":0},{"id":168189,"username":"rik","name":"R K Belew","avatar_template":"/user_avatar/discuss.elastic.co/rik/{size}/147516_2.png","trust_level":1},{"id":29038,"username":"RainTown","name":"Kevin Maguire","avatar_template":"/user_avatar/discuss.elastic.co/raintown/{size}/140206_2.png","trust_level":3},{"id":164651,"username":"azmatjan139","name":"Luke","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/f17d59/{size}.png","trust_level":0},{"id":170027,"username":"Harry123","name":"Harry123","avatar_template":"/user_avatar/discuss.elastic.co/harry123/{size}/144861_2.png","trust_level":0},{"id":169637,"username":"After_Marsupial_3531","name":"Pinigseu","avatar_template":"/user_avatar/discuss.elastic.co/after_marsupial_3531/{size}/147862_2.png","trust_level":0},{"id":169539,"username":"cartergray234","name":"Carter Gray","avatar_template":"/user_avatar/discuss.elastic.co/cartergray234/{size}/147857_2.png","trust_level":0},{"id":169195,"username":"gamerlook","name":"gamer","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/g/a4c791/{size}.png","trust_level":0},{"id":169033,"username":"reports","name":"reports ","avatar_template":"/user_avatar/discuss.elastic.co/reports/{size}/147784_2.png","trust_level":1},{"id":168893,"username":"Mohamed_Nada","name":"Mohamed Nada","avatar_template":"/user_avatar/discuss.elastic.co/mohamed_nada/{size}/147716_2.png","trust_level":0},{"id":169007,"username":"Boris_XDR","name":"Boris Ilyushonak","avatar_template":"/user_avatar/discuss.elastic.co/boris_xdr/{size}/147760_2.png","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"primary_group_name":"elastic_team","trust_level":4},{"id":164474,"username":"Rafa_Silva","name":"Rafa Silva","avatar_template":"/user_avatar/discuss.elastic.co/rafa_silva/{size}/147814_2.png","trust_level":2},{"id":166857,"username":"YousefNein","name":"Yossif Helmy","avatar_template":"/user_avatar/discuss.elastic.co/yousefnein/{size}/145549_2.png","trust_level":1},{"id":159710,"username":"Tortoise","name":"","avatar_template":"/user_avatar/discuss.elastic.co/tortoise/{size}/147587_2.png","trust_level":2},{"id":168536,"username":"william.cheang","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/w/f08c70/{size}.png","trust_level":1}],"primary_groups":[{"id":46,"name":"elastic_certified"},{"id":44,"name":"elastic_team"}],"flair_groups":[{"id":46,"name":"elastic_certified","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/4/b/4b7ff6230ea5ae3c4c3f43b26e783b36ceea35b2.png","flair_bg_color":"","flair_color":"00BFB3"},{"id":44,"name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_bg_color":"","flair_color":""}],"topic_list":{"can_create_topic":false,"filter":"latest","more_topics_url":"/c/security/83?page=1","per_page":30,"top_tags":[{"id":64,"name":"detection-rules","slug":"detection-rules"},{"id":25,"name":"fleet","slug":"fleet"},{"id":8,"name":"elastic-stack-security","slug":"elastic-stack-security"},{"id":12,"name":"elastic-stack-alerting","slug":"elastic-stack-alerting"},{"id":15,"name":"docker","slug":"docker"},{"id":63,"name":"elastic-agent","slug":"elastic-agent"},{"id":9,"name":"elastic-stack-machine-learning","slug":"elastic-stack-machine-learning"},{"id":93,"name":"eql-elastic-query-language","slug":"eql-elastic-query-language"},{"id":94,"name":"osquery-manager","slug":"osquery-manager"},{"id":26,"name":"ecs-elastic-common-schema","slug":"ecs-elastic-common-schema"},{"id":104,"name":"integrations","slug":"integrations"},{"id":14,"name":"license","slug":"license"},{"id":44,"name":"windows","slug":"windows"},{"id":7,"name":"elastic-stack-monitoring","slug":"elastic-stack-monitoring"},{"id":19,"name":"painless","slug":"painless"},{"id":136,"name":"elastic-ai-assistant","slug":"elastic-ai-assistant"},{"id":127,"name":"dashboard","slug":"dashboard"},{"id":85,"name":"datastreams","slug":"datastreams"},{"id":82,"name":"ingest-pipeline","slug":"ingest-pipeline"},{"id":27,"name":"ccs-cross-cluster-search","slug":"ccs-cross-cluster-search"},{"id":135,"name":"defend-for-containers","slug":"defend-for-containers"},{"id":149,"name":"esql","slug":"esql"},{"id":49,"name":"kql-kibana-query-language","slug":"kql-kibana-query-language"},{"id":43,"name":"language-clients","slug":"language-clients"},{"id":154,"name":"serverless","slug":"serverless"},{"id":41,"name":"windows-installer","slug":"windows-installer"},{"id":29,"name":"beats-module","slug":"beats-module"},{"id":24,"name":"curator","slug":"curator"},{"id":10,"name":"elastic-stack-reporting","slug":"elastic-stack-reporting"},{"id":89,"name":"snapshot-and-restore","slug":"snapshot-and-restore"},{"id":110,"name":"timelion","slug":"timelion"}],"topics":[{"fancy_title":"About the Elastic Security category","id":235256,"title":"About the Elastic Security category","slug":"about-the-elastic-security-category","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2020-06-02T00:08:50.240Z","last_posted_at":"2020-06-02T00:08:50.250Z","bumped":true,"bumped_at":"2021-11-27T02:17:57.558Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Unified protection, from the creators of the Elastic Stack\nIntegrate free and open SIEM, and endpoint, to prevent, detect, and respond to threats.","visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":3159,"like_count":0,"has_summary":false,"last_poster_username":"warkolm","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":60,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Sharing my rule update experience on Elastic Security Serverless","id":389853,"title":"Sharing my rule update experience on Elastic Security Serverless","slug":"sharing-my-rule-update-experience-on-elastic-security-serverless","posts_count":16,"reply_count":11,"highest_post_number":17,"image_url":"https://us1.discourse-cdn.com/elastic/optimized/3X/d/6/d698bba0928ebd0495cdb08e4ecc5d993887719e_2_1023x501.png","created_at":"2026-08-21T20:04:31.507Z","last_posted_at":"2026-10-10T10:13:12.458Z","bumped":true,"bumped_at":"2026-10-10T10:13:12.458Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":426,"like_count":9,"has_summary":false,"last_poster_username":"willemdh","category_id":78,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":12203,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":null,"description":"Frequent Poster","user_id":137383,"primary_group_id":44,"flair_group_id":44},{"extras":null,"description":"Recent Poster","user_id":164695,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":170990,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"License dection rules","id":390802,"title":"License dection rules","slug":"license-dection-rules","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-10-01T14:40:26.129Z","last_posted_at":"2026-10-06T15:53:00.292Z","bumped":true,"bumped_at":"2026-10-06T15:53:00.292Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":64,"name":"detection-rules","slug":"detection-rules"}],"tags_descriptions":{},"views":120,"like_count":0,"has_summary":false,"last_poster_username":"lesio","category_id":80,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":171531,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":125462,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"False Positive","id":390842,"title":"False Positive","slug":"false-positive","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-10-05T13:15:41.845Z","last_posted_at":"2026-10-05T13:15:41.930Z","bumped":true,"bumped_at":"2026-10-05T13:15:41.930Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":59,"like_count":0,"has_summary":false,"last_poster_username":"JasperHedge","category_id":80,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":171557,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Forwarding detection alert status changes (acknowledged / closed) to an external system","id":390784,"title":"Forwarding detection alert status changes (acknowledged / closed) to an external system","slug":"forwarding-detection-alert-status-changes-acknowledged-closed-to-an-external-system","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-09-30T17:50:41.308Z","last_posted_at":"2026-09-30T18:17:33.669Z","bumped":true,"bumped_at":"2026-09-30T18:17:33.669Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":88,"like_count":3,"has_summary":false,"last_poster_username":"willemdh","category_id":78,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":12203,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Elastic defend (Automatic Response Action Isnt Working )","id":390597,"title":"Elastic defend (Automatic Response Action Isnt Working )","slug":"elastic-defend-automatic-response-action-isnt-working","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":"https://us1.discourse-cdn.com/elastic/original/3X/c/0/c09976a29c455d27b42957a36ea169a4c6dc2661.png","created_at":"2026-09-23T06:45:10.214Z","last_posted_at":"2026-09-25T09:17:29.417Z","bumped":true,"bumped_at":"2026-09-25T09:17:29.417Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":67,"like_count":0,"has_summary":false,"last_poster_username":"lesio","category_id":80,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167567,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":125462,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"Integration with omega-scan","id":390677,"title":"Integration with omega-scan","slug":"integration-with-omega-scan","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-09-25T08:07:24.831Z","last_posted_at":"2026-09-25T08:07:24.946Z","bumped":true,"bumped_at":"2026-09-25T08:07:24.946Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":32,"like_count":0,"has_summary":false,"last_poster_username":"wessorh","category_id":80,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":171446,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"RFC: Disable automatic refresh in event analyzer","id":390600,"title":"RFC: Disable automatic refresh in event analyzer","slug":"rfc-disable-automatic-refresh-in-event-analyzer","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-09-23T08:35:03.360Z","last_posted_at":"2026-09-23T08:35:03.412Z","bumped":true,"bumped_at":"2026-09-23T08:35:03.412Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":42,"like_count":1,"has_summary":false,"last_poster_username":"michael-a","category_id":83,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":153227,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"DNS Activity Data from Elastic Defend","id":390171,"title":"DNS Activity Data from Elastic Defend","slug":"dns-activity-data-from-elastic-defend","posts_count":8,"reply_count":6,"highest_post_number":8,"image_url":null,"created_at":"2026-09-04T07:03:25.678Z","last_posted_at":"2026-09-10T08:58:51.716Z","bumped":true,"bumped_at":"2026-09-10T08:58:51.716Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":278,"like_count":4,"has_summary":false,"last_poster_username":"RalphDibney","category_id":83,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":167889,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster, Accepted Answer","user_id":99262,"primary_group_id":44,"flair_group_id":44},{"extras":null,"description":"Recent Poster","user_id":12203,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Can Elastic Defend Event Collection interfere with software installation?","id":389935,"title":"Can Elastic Defend Event Collection interfere with software installation?","slug":"can-elastic-defend-event-collection-interfere-with-software-installation","posts_count":6,"reply_count":4,"highest_post_number":6,"image_url":null,"created_at":"2026-08-26T14:55:55.790Z","last_posted_at":"2026-09-09T16:43:35.088Z","bumped":true,"bumped_at":"2026-09-09T16:43:35.088Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":295,"like_count":3,"has_summary":false,"last_poster_username":"NickFritts","category_id":80,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":131250,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":12203,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":99262,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"Elastic Defend Service Enhancement","id":389619,"title":"Elastic Defend Service Enhancement","slug":"elastic-defend-service-enhancement","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-08-14T12:12:57.903Z","last_posted_at":"2026-08-28T20:52:54.306Z","bumped":true,"bumped_at":"2026-08-28T20:52:54.306Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":148,"like_count":1,"has_summary":false,"last_poster_username":"lesio","category_id":80,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":170674,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":125462,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"Prevent to create global exceptions for space user","id":389911,"title":"Prevent to create global exceptions for space user","slug":"prevent-to-create-global-exceptions-for-space-user","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":"https://us1.discourse-cdn.com/elastic/optimized/3X/5/f/5f77614aeeef7f59e70a1cc7ee2b8b3ac09bd21d_2_1024x516.jpeg","created_at":"2026-08-25T12:00:03.874Z","last_posted_at":"2026-08-25T12:30:02.206Z","bumped":true,"bumped_at":"2026-08-25T12:30:02.206Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":108,"like_count":1,"has_summary":false,"last_poster_username":"adamsmesher","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster, Accepted Answer","user_id":167620,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"False Positive","id":389749,"title":"False Positive","slug":"false-positive","posts_count":8,"reply_count":5,"highest_post_number":10,"image_url":null,"created_at":"2026-08-18T09:40:11.398Z","last_posted_at":"2026-08-24T21:49:27.196Z","bumped":true,"bumped_at":"2026-08-24T21:49:27.196Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"visibility_reason_id":1,"tags":[],"tags_descriptions":{},"views":296,"like_count":4,"has_summary":false,"last_poster_username":"stephenb","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":170759,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":84308,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"Process Tree Analyzer from custom space issue","id":389894,"title":"Process Tree Analyzer from custom space issue","slug":"process-tree-analyzer-from-custom-space-issue","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://us1.discourse-cdn.com/elastic/optimized/3X/d/f/dfb3bf9b5b171075cdb26d742f461371493fbba3_2_1024x592.png","created_at":"2026-08-24T16:48:23.658Z","last_posted_at":"2026-08-24T16:48:23.731Z","bumped":true,"bumped_at":"2026-08-24T16:48:23.731Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":97,"like_count":0,"has_summary":false,"last_poster_username":"adamsmesher","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":167620,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Device control enabled without license","id":388399,"title":"Device control enabled without license","slug":"device-control-enabled-without-license","posts_count":5,"reply_count":1,"highest_post_number":5,"image_url":null,"created_at":"2026-07-17T14:29:27.490Z","last_posted_at":"2026-08-19T16:40:30.271Z","bumped":true,"bumped_at":"2026-08-19T16:40:30.271Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":162,"like_count":1,"has_summary":false,"last_poster_username":"Konrad_Szwarc","category_id":83,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":169696,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":169700,"primary_group_id":44,"flair_group_id":44},{"extras":null,"description":"Recent Poster","user_id":169666,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Auditd Logs 3.24.1 - “Use auditd parser” fails on Elastic 9.3.3 with Missing helper: semverSatisfies","id":389780,"title":"Auditd Logs 3.24.1 - \"Use auditd parser\" fails on Elastic 9.3.3 with Missing helper: semverSatisfies","slug":"auditd-logs-3-24-1-use-auditd-parser-fails-on-elastic-9-3-3-with-missing-helper-semversatisfies","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-08-19T11:15:31.476Z","last_posted_at":"2026-08-19T14:20:03.179Z","bumped":true,"bumped_at":"2026-08-19T14:20:03.179Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":74,"like_count":3,"has_summary":false,"last_poster_username":"leandrojmp","category_id":78,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":12203,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Multiple Machine Learning Alerts by Influencer Field failing Unknown column [job_id]","id":389743,"title":"Multiple Machine Learning Alerts by Influencer Field failing Unknown column [job_id]","slug":"multiple-machine-learning-alerts-by-influencer-field-failing-unknown-column-job-id","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-08-18T07:29:47.591Z","last_posted_at":"2026-08-18T07:29:47.676Z","bumped":true,"bumped_at":"2026-08-18T07:29:47.676Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":56,"like_count":0,"has_summary":false,"last_poster_username":"willemdh","category_id":78,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":12203,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"…/config/certs/ca/ca.crt : file does not exist","id":389678,"title":".../config/certs/ca/ca.crt : file does not exist","slug":"config-certs-ca-ca-crt-file-does-not-exist","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-08-15T21:55:06.986Z","last_posted_at":"2026-08-16T17:37:39.053Z","bumped":true,"bumped_at":"2026-08-16T17:37:39.053Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":94,"like_count":0,"has_summary":false,"last_poster_username":"rik","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":168189,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Elastic Partition Problem","id":388924,"title":"Elastic Partition Problem","slug":"elastic-partition-problem","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2026-07-31T12:37:45.125Z","last_posted_at":"2026-07-31T16:32:03.161Z","bumped":true,"bumped_at":"2026-07-31T16:32:03.161Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":85,"like_count":0,"has_summary":false,"last_poster_username":"RainTown","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167567,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":"latest","description":"Most Recent Poster","user_id":29038,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Secops-es-benchmark: an open benchmark for AI security agents on real Elasticsearch telemetry","id":388910,"title":"Secops-es-benchmark: an open benchmark for AI security agents on real Elasticsearch telemetry","slug":"secops-es-benchmark-an-open-benchmark-for-ai-security-agents-on-real-elasticsearch-telemetry","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-07-30T16:13:07.043Z","last_posted_at":"2026-07-30T16:13:07.137Z","bumped":true,"bumped_at":"2026-07-30T16:13:07.137Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":77,"like_count":0,"has_summary":false,"last_poster_username":"azmatjan139","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":164651,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Sizing Guide","id":388811,"title":"Sizing Guide","slug":"sizing-guide","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-07-27T11:27:33.128Z","last_posted_at":"2026-07-27T12:07:42.259Z","bumped":true,"bumped_at":"2026-07-27T12:07:42.259Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":122,"like_count":1,"has_summary":false,"last_poster_username":"RainTown","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167567,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":29038,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Adding Tags to Elastic Endpoint Security Prebuilt rule","id":388799,"title":"Adding Tags to Elastic Endpoint Security Prebuilt rule","slug":"adding-tags-to-elastic-endpoint-security-prebuilt-rule","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-07-26T15:50:22.781Z","last_posted_at":"2026-07-26T15:50:22.867Z","bumped":true,"bumped_at":"2026-07-26T15:50:22.867Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":74,"like_count":1,"has_summary":false,"last_poster_username":"Harry123","category_id":83,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":170027,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Feedback for ransomware correlation using Elastic","id":388311,"title":"Feedback for ransomware correlation using Elastic","slug":"feedback-for-ransomware-correlation-using-elastic","posts_count":4,"reply_count":1,"highest_post_number":4,"image_url":null,"created_at":"2026-07-13T09:14:53.973Z","last_posted_at":"2026-07-13T16:40:28.728Z","bumped":true,"bumped_at":"2026-07-13T16:40:28.728Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":113,"like_count":4,"has_summary":false,"last_poster_username":"willemdh","category_id":83,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":169637,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster, Accepted Answer","user_id":169539,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":12203,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Managing Ammunition Link Inventory Data with Search and Analytics Systems","id":387712,"title":"Managing Ammunition Link Inventory Data with Search and Analytics Systems","slug":"managing-ammunition-link-inventory-data-with-search-and-analytics-systems","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-07-07T14:03:56.134Z","last_posted_at":"2026-07-07T14:03:56.212Z","bumped":true,"bumped_at":"2026-07-07T14:03:56.212Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":50,"like_count":0,"has_summary":false,"last_poster_username":"gamerlook","category_id":78,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":169195,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Endpoint does not show up in Asset management page","id":387505,"title":"Endpoint does not show up in Asset management page","slug":"endpoint-does-not-show-up-in-asset-management-page","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":"https://us1.discourse-cdn.com/elastic/optimized/3X/7/b/7bfbf376016e6fb0935298d52735efd0c0627dc6_2_1024x587.png","created_at":"2026-07-03T14:46:39.319Z","last_posted_at":"2026-07-03T18:51:03.905Z","bumped":true,"bumped_at":"2026-07-03T18:51:03.905Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":107,"like_count":1,"has_summary":false,"last_poster_username":"leandrojmp","category_id":80,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":null,"description":"Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Optimizing Incident Triaging via Kibana Case Integration","id":387480,"title":"Optimizing Incident Triaging via Kibana Case Integration","slug":"optimizing-incident-triaging-via-kibana-case-integration","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-07-02T15:03:22.198Z","last_posted_at":"2026-07-02T15:03:22.275Z","bumped":true,"bumped_at":"2026-07-02T15:03:22.275Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":75,"like_count":0,"has_summary":false,"last_poster_username":"reports","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":169033,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Defend for Containers (D4C) integration with OPENSHIFT","id":387268,"title":"Defend for Containers (D4C) integration with OPENSHIFT","slug":"defend-for-containers-d4c-integration-with-openshift","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-06-24T13:59:50.372Z","last_posted_at":"2026-06-30T13:31:40.160Z","bumped":true,"bumped_at":"2026-06-30T13:31:40.160Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":135,"name":"defend-for-containers","slug":"defend-for-containers"},{"id":15,"name":"docker","slug":"docker"}],"tags_descriptions":{},"views":105,"like_count":0,"has_summary":false,"last_poster_username":"Boris_XDR","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":168893,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":169007,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"Defend for containers integration failed on OpenShift environment","id":387356,"title":"Defend for containers integration failed on OpenShift environment","slug":"defend-for-containers-integration-failed-on-openshift-environment","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-06-26T19:30:58.824Z","last_posted_at":"2026-06-27T02:08:21.289Z","bumped":true,"bumped_at":"2026-06-27T02:08:21.289Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":113,"like_count":1,"has_summary":false,"last_poster_username":"Rafa_Silva","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":168893,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":164474,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Trying to calculate MTTD (Mean Time To Detect)","id":384517,"title":"Trying to calculate MTTD (Mean Time To Detect)","slug":"trying-to-calculate-mttd-mean-time-to-detect","posts_count":5,"reply_count":2,"highest_post_number":5,"image_url":"https://us1.discourse-cdn.com/elastic/optimized/3X/2/0/2049a1c137961d40689cb3daec156bfec4cd1ff1_2_1024x186.png","created_at":"2026-01-13T17:35:57.029Z","last_posted_at":"2026-06-18T12:00:58.169Z","bumped":true,"bumped_at":"2026-06-18T12:00:58.169Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":217,"like_count":5,"has_summary":false,"last_poster_username":"YousefNein","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster, Accepted Answer","user_id":166857,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":159710,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Custom App with authentication log","id":386871,"title":"Custom App with authentication log","slug":"custom-app-with-authentication-log","posts_count":9,"reply_count":6,"highest_post_number":9,"image_url":null,"created_at":"2026-06-16T06:55:09.620Z","last_posted_at":"2026-06-18T03:29:12.789Z","bumped":true,"bumped_at":"2026-06-18T03:29:12.789Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":147,"like_count":2,"has_summary":false,"last_poster_username":"william.cheang","category_id":83,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":168536,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]}]}}