Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
About the SIEM category	0	2394	May 20, 2019
Missing md5 field in Harmony Email & Collaboration integration with Elastic	1	24	August 19, 2025
Fortigate not listed under "Network events" in Security	4	86	August 21, 2025
Elastic and AlienVault OTX integration	2	54	August 21, 2025
Maximum Number of Cases Template on Elastic SIEM	3	69	August 21, 2025
Is there a way to correlate FortiGate logs?	2	53	August 17, 2025
How to expose custom fields from alert JSON in the Slack API connector?	1	40	July 18, 2025
Machine learning use case - Anomaly Detection	7	145	August 7, 2025
How to detect abnormal User behaviour (sequence of actions)	4	124	June 21, 2025
Cef log with custom udp integration	5	37	June 19, 2025
'add agent' issue	1	18	June 18, 2025
Enriching Web Filter Logs with Username from Traffic Logs Using Session ID in Fortinet Logs	1	40	June 6, 2025
Import ingest pipeline	2	39	June 3, 2025
Error in detection rule: Remote Computer Account DnsHostName Update	9	35	May 31, 2025
Wrong ML Job query packetbeat_rare_user_agent or missing event.dataset in network traffic data?	3	30	May 27, 2025
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes	1	27	May 23, 2025
Firewall logs to different Datastream by type	23	123	May 22, 2025
Security Case Management Based on Parent Tenant & Subsidiary	1	17	May 22, 2025
CEF integration gives error if it encounters non-UTF-8 valuestion	1	14	May 14, 2025
Does Common Event Format (CEF) not allow a custom ingestion pipeline?	5	50	May 9, 2025
Elastic SIEM Alert hostname missing	1	36	May 5, 2025
EQL Detection Rule issues	2	86	May 2, 2025
Closing an alert in Elastic Security without using the GUI	1	83	April 21, 2025
ML anomaly detection alert	1	48	April 22, 2025
Create new Event Renderers	2	47	April 3, 2025
After upgrading Elastic SIEM to version 8.17.2 a lot security alerts are not being displayed.	1	55	March 27, 2025
Sysmon registry logs don't get to elastic windows	1	89	March 19, 2025
How to reduce false/positives for prebuilt Windows Security ML jobs?	1	50	March 14, 2025
How to Retrieve More Than 10K Records in EQL (_eql/search)? (Elasticsearch 7.10.1)	2	76	March 11, 2025
Issue with Elastic Agent Imperva Integration	1	42	March 11, 2025