Elastic Security

Topic	Replies	Views	Activity
Does Elastic Defend receive detection updates? Elastic Security	2	122	May 20, 2025
Enriching Web Filter Logs with Username from Traffic Logs Using Session ID in Fortinet Logs SIEM	1	63	June 6, 2025
Anybody successfully created a detection rule for Red Hat security updates Elastic Security detection-rules	1	73	May 9, 2025
Import ingest pipeline SIEM	2	64	June 3, 2025
Error in detection rule: Remote Computer Account DnsHostName Update SIEM	9	73	May 31, 2025
Wrong ML Job query packetbeat_rare_user_agent or missing event.dataset in network traffic data? SIEM	3	50	May 27, 2025
Elastic Agent changes local security policy? Elastic Security	2	68	April 29, 2025
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes SIEM	1	45	May 23, 2025
Features for Elastic SIEM Elastic Security	0	78	April 25, 2025
Firewall logs to different Datastream by type SIEM	23	207	May 22, 2025
Security Case Management Based on Parent Tenant & Subsidiary SIEM	1	35	May 22, 2025
Are the Self Signed Certs bound by IP / Hostname Elastic Security	11	128	April 21, 2025
Prebuilt Rule Customization is an Enterprise feature?! Elastic Security detection-rules	0	63	April 19, 2025
False positive report Elastic Security	1	86	April 17, 2025
CEF integration gives error if it encounters non-UTF-8 valuestion SIEM	1	27	May 14, 2025
Domain Generation Algorithm Detection Documentation Page: Images Missing Elastic Security	1	36	April 16, 2025
Changes removed from system index templates Elastic Security	0	35	April 15, 2025
Roles permissions/privileges Elastic Security	1	73	April 14, 2025
Does Common Event Format (CEF) not allow a custom ingestion pipeline? SIEM	5	77	May 9, 2025
Domain Generation Algorithm (DGA) Card NOT Appearing Elastic Security	0	34	April 11, 2025
Annoying problem while browsing the detection rules Elastic Security	1	53	April 7, 2025
How to handle host specific (maintenance) exceptions for SIEM security rules? Elastic Security	2	70	May 5, 2025
Elastic SIEM Alert hostname missing SIEM	1	61	May 5, 2025
EQL Detection Rule issues SIEM	2	121	May 2, 2025
Policy response failure - endpoint service missed 3 check ins Elastic Security	4	191	May 2, 2025
Osquery Manager Feedback Elastic Security osquery-manager	0	50	April 4, 2025
EQL query debugging options Elastic Security	0	31	April 4, 2025
Packetbeat_dns_tunneling ML job Bug Elastic Security	2	48	April 3, 2025
Closing an alert in Elastic Security without using the GUI SIEM	1	115	April 21, 2025
ML anomaly detection alert SIEM	1	62	April 22, 2025