|
Using LLM together Elastic SIEM
|
|
0
|
101
|
May 24, 2026
|
|
Server objects and network objects?
|
|
1
|
70
|
October 22, 2025
|
|
Annoying problem while browsing the detection rules
|
|
1
|
70
|
April 7, 2025
|
|
Restricting rights to detection rules
|
|
1
|
69
|
August 13, 2024
|
|
Process Tree Analyzer from custom space issue
|
|
0
|
97
|
August 24, 2026
|
|
Create a condition in EQL/ES|QL query for alert
|
|
0
|
95
|
March 12, 2025
|
|
How to write elastic security events to a separate index?
|
|
1
|
67
|
August 19, 2024
|
|
Error using Detection-rule CLI
|
|
1
|
67
|
July 23, 2024
|
|
Feature Request: Native named pipe events in Elastic Defend (SMB beacon detection)
|
|
0
|
94
|
May 31, 2026
|
|
Question Regarding OpenSource License Change for Detection Rules Repository
|
|
0
|
94
|
September 3, 2024
|
|
Elastic SIEM Alert hostname missing
|
|
0
|
92
|
April 7, 2025
|
|
ML anomaly detection alert
|
|
0
|
91
|
March 25, 2025
|
|
Elasticsearch 7.9.3 http 401
|
|
0
|
91
|
July 1, 2024
|
|
Elastic defend (Automatic Response Action Isnt Working )
|
|
1
|
64
|
September 25, 2026
|
|
Pending status when i started scan
|
|
1
|
64
|
January 13, 2025
|
|
How do I use Exceptions_list and Alert_Suppressions schemas for detections in TOML format?
|
|
0
|
90
|
February 3, 2025
|
|
Column width not resizable in Timelines
|
|
1
|
63
|
September 8, 2025
|
|
**Only some alerts are triggered during scheduled execution.**
|
|
1
|
61
|
June 10, 2025
|
|
Prebuilt Rule Customization is an Enterprise feature?!
|
|
0
|
86
|
April 19, 2025
|
|
Cofense Intelligence (ti integration)
|
|
0
|
84
|
April 27, 2026
|
|
Trial extension request for Elastic ML features on on-premises
|
|
1
|
59
|
February 23, 2026
|
|
Threat Intelligence View Not Using securitySolution:defaultThreatIndex
|
|
1
|
58
|
March 12, 2026
|
|
[Custom API] Integration via GUI
|
|
0
|
82
|
January 23, 2026
|
|
Issue with Hourly Data Collection When Initial Interval Has No Data
|
|
2
|
47
|
January 31, 2025
|
|
Is it possible to set kibana.alert.workflow as mandatory field
|
|
1
|
57
|
January 24, 2025
|
|
Alert response/action SLA support?
|
|
0
|
80
|
June 19, 2025
|
|
What is the best way to secure the cluster?
|
|
1
|
56
|
August 15, 2024
|
|
Feature request: duplicate security rule exceptions
|
|
1
|
55
|
January 31, 2025
|
|
Timeline filter always overwriting first value
|
|
1
|
55
|
August 9, 2024
|
|
Security Case Management Based on Parent Tenant & Subsidiary
|
|
0
|
75
|
April 24, 2025
|
|
What are the similarities and/or differences between Rare Jobs and Population Jobs in Elastic Cloud Machine Learning for Anomaly Detection?
|
|
0
|
75
|
February 12, 2025
|
|
Timeline template isn't being applied properly over threshold rules
|
|
0
|
75
|
August 6, 2024
|
|
Optimizing Incident Triaging via Kibana Case Integration
|
|
0
|
74
|
July 2, 2026
|
|
Recommended field types for writing detections on with lucene
|
|
1
|
52
|
January 8, 2025
|
|
Problems Correlating Data with Rules Created for Detecting Access to Forbidden Websites
|
|
0
|
73
|
May 6, 2026
|
|
'add agent' issue
|
|
0
|
73
|
May 21, 2025
|
|
Guidance for running Elastic Defend on ECE hosts
|
|
0
|
70
|
March 25, 2026
|
|
Domain Generation Algorithm Detection Documentation Page: Images Missing
|
|
1
|
49
|
April 16, 2025
|
|
License dection rules
|
|
0
|
73
|
October 1, 2026
|
|
Secops-es-benchmark: an open benchmark for AI security agents on real Elasticsearch telemetry
|
|
0
|
69
|
July 30, 2026
|
|
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes
|
|
0
|
69
|
April 25, 2025
|
|
How to extend Elastic Agent ability?
|
|
0
|
69
|
February 20, 2025
|
|
Integration FortiDLP to Elastic SIEM
|
|
0
|
66
|
May 30, 2025
|
|
ES|QL Get information about a grandparent process
|
|
0
|
66
|
November 26, 2024
|
|
Database Use case for DDL and DML command
|
|
0
|
64
|
November 20, 2024
|
|
DNS Tunneling job failing to start
|
|
0
|
64
|
August 27, 2024
|
|
Grouping Data Streams Based on Privilege Levels in UI
|
|
0
|
63
|
January 31, 2025
|
|
How to use Alert Supression object in TOML format for threshold rules?
|
|
0
|
63
|
December 18, 2024
|
|
RBAC Query
|
|
0
|
62
|
November 12, 2024
|
|
Distinguish between actions in container from action on hosts
|
|
0
|
61
|
October 15, 2024
|