Discuss the Elastic Stack

Elastic Security

Topic		Replies	Views	Activity
Mapper [signal.ancestors.index] cannot be changed from type [text] to [keyword] Elastic Security		9	497	February 21, 2023
After the ElasticEndpoint enables full disk access, it is closed after a period of time Endpoint Security		11	358	May 1, 2024
SIEM and XDR Alerts Elastic Security		9	380	July 9, 2024
ELK Architecture Distribution for Hardware to Achieve high availability Elastic Security		16	149	February 11, 2026
Detection Rules Update Failure Elastic Security detection-rules		9	337	November 19, 2024
MacOS agents are unhealthy due to Defend Endpoint Elastic Security		12	246	July 11, 2025
Cross cluster replication not able to start Elastic Security		9	244	July 26, 2024
Elastic Defend Windows Defender question Endpoint Security		10	225	December 1, 2025
Open Source Vulnerabilities Endpoint Security		10	197	June 25, 2025
Are the Self Signed Certs bound by IP / Hostname Elastic Security		11	167	April 21, 2025
The audit log integration process.args log entry only contains the user.id field; it does not contain the user.name field. Please suggest!It's urgent! Endpoint Security		9	134	March 19, 2025
Error in detection rule: Remote Computer Account DnsHostName Update SIEM		9	97	May 31, 2025
_DataId Health Monitoring Elastic Security		12	78	April 22, 2026
Elastic Agent 7.10.1 : javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate Elastic Security		3	11049	November 4, 2022
Threat Intel and SIEM SIEM		3	4429	December 15, 2020
[ Creating new rule ]: ERROR Authentication using apikey failed - api key has been invalidated SIEM elastic-stack-security , elastic-stack-alerting		5	9489	February 16, 2021
Process Ghosting Tool - 64 bits Only! Elastic Security		2	677	July 22, 2021
Group identical alerts in Elastic Security [7.14.2] Elastic Security detection-rules		1	448	December 2, 2021
Detection and Response for CVE-2021-40444 Elastic Security		2	1919	October 12, 2021
Fields missing in EQL sequence detection rule with building block alert as source Elastic Security detection-rules , eql-elastic-query-language		1	579	December 3, 2021
Elastic SIEM TheHive Integration SIEM		2	2532	September 7, 2021
Submitting False Positives Endpoint Security We welcome your False Positive (FP) report for Elastic’s malware detection engine. These FP reports help us improve our security products. Please note that as of June 5, 2024 we have updated our False Positive review pr…		1	5266	August 17, 2020
Elastic Agent for Mobile Android and iOS Endpoint Security		2	2372	October 27, 2020
Detection and Response for ProxyShell Activity Elastic Security		1	2676	September 21, 2021
Palo Alto [SIEM] SIEM		3	722	July 17, 2020
SIgma rules for Elastic SIEM SIEM		5	13057	May 1, 2021
Issues with Elastic Agent and Defender? Endpoint Security		7	6125	May 11, 2021
Index Alias in Elastic Security (Network Map) [7.9.2] Elastic Security		4	424	May 28, 2021
Endpoint 7.12.x migration to 7.13 Lesson learned with Fleet "On-Prim" Elastic Security fleet		8	836	July 9, 2021
Active Directory logs and mapping to ECS (I am stumped) SIEM ecs-elastic-common-schema		7	8680	November 11, 2019
Detecting inactive users in Active Directory SIEM elastic-stack-alerting		5	1777	January 25, 2023
Security rule exception not working Elastic Security		5	1534	February 18, 2022
Anyone have success using Machine Learning to detect Fast or Impossible Travel? Elastic Security elastic-stack-machine-learning		7	2340	December 14, 2021
Threshold Rule for Detecting Brute force Attacks Elastic Security		7	3672	November 4, 2022
Installing ElasticAgent with GPO Endpoint Security windows-installer , elastic-agent		6	3891	June 8, 2022
Deploy Elastic Agent 8.3.2 via Windows GPO Endpoint Security windows-installer , elastic-agent		2	3144	August 23, 2022
Limit CPU/Memory usage in Auditbeat & Filebeats , version 7.9.0 SIEM		8	5400	October 15, 2020
How to stop Elastic Endpoint Endpoint Security		6	6026	April 12, 2021
Event Correlation on ELK SIEM		3	7943	September 23, 2019
Multiple Different Clients SIEM		5	2018	February 1, 2021
Fleet Server won't start - certificate error Elastic Security fleet		3	7318	July 1, 2021
Curl: (77) Problem with the SSL CA cert (path? access rights?) Elastic Security		5	5188	September 7, 2023
Set length limit and bottom scroll bar in Exceptions table Elastic Security		2	400	February 4, 2022
Hosts table : host.name (alias of beat.name) used instead of agent.hostname SIEM		2	3942	March 16, 2020
Feature Request for more robust vector graphics (Vega not enough) so I can generate good looking network maps (non-geographic) SIEM		3	598	April 20, 2023
EQL detection rule run on indices created by Transforms Elastic Security detection-rules		3	1033	April 21, 2021
End point security fails for Elastic Agent with error "Missed two check-ins" Endpoint Security		6	4267	March 18, 2022
Elastic/Kibana integration with TheHive Elastic Security elastic-stack-alerting		1	788	September 16, 2022
Elastic Agent (Fleet Deployment) behind a proxy Endpoint Security		7	2200	December 2, 2020
Fleet Server - Error - x509: certificate is valid for 127.0.0.1, not x.x.x.x Elastic Security elastic-stack-security , fleet		3	5525	June 27, 2022

© 2020. All Rights Reserved - Elasticsearch

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.