SIEM - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Indicator matching rule with MISP intel with too long duration	1	47	August 20, 2024
Wrong ML Job query packetbeat_rare_user_agent or missing event.dataset in network traffic data?	3	30	May 27, 2025
RBAC Query	2	34	December 10, 2024
Issue with Elastic Agent Imperva Integration	1	41	March 11, 2025
Timeline filter always overwriting first value	2	33	September 6, 2024
How to expose custom fields from alert JSON in the Slack API connector?	1	40	July 18, 2025
Enriching Web Filter Logs with Username from Traffic Logs Using Session ID in Fortinet Logs	1	39	June 6, 2025
Timeline template isn't being applied properly over threshold rules	1	38	September 3, 2024
Elastic SIEM Alert hostname missing	1	35	May 5, 2025
DNS Tunneling job failing to start	1	35	September 24, 2024
Database Use case for DDL and DML command license	1	29	December 18, 2024
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes	1	27	May 23, 2025
Missing md5 field in Harmony Email & Collaboration integration with Elastic	1	23	August 19, 2025
'add agent' issue	1	18	June 18, 2025
Security Case Management Based on Parent Tenant & Subsidiary	1	17	May 22, 2025
CEF integration gives error if it encounters non-UTF-8 valuestion	1	14	May 14, 2025