SIEM - Discuss the Elastic Stack

Topic	Replies	Views	Activity
FIM and Windows Updates Best Practices	1	114	October 9, 2024
O365 Logs - Single failed log in attempt multiple logs generated	3	79	October 27, 2025
Question About the ‘Supplied Configurations’ Section in Anomaly Detection for Time Series Data with Machine Learning on Elastic Cloud 8.17	5	64	January 30, 2025
Import ingest pipeline	2	88	June 3, 2025
Least-Privilege To View All Server Asset Sending Logs	1	105	June 5, 2024
Create new Event Renderers	2	89	April 3, 2025
Using Elastic Security as SOAR for IBM QRadar SIEM (Log Forwarding Architecture)	5	59	April 16, 2026
Hunt dashboard dashboard	1	94	September 26, 2024
Issue with Elastic Agent Imperva Integration	1	88	March 11, 2025
Wrong ML Job query packetbeat_rare_user_agent or missing event.dataset in network traffic data?	3	61	May 27, 2025
How to expose custom fields from alert JSON in the Slack API connector?	1	85	July 18, 2025
Enriching Web Filter Logs with Username from Traffic Logs Using Session ID in Fortinet Logs	1	84	June 6, 2025
How to reduce false/positives for prebuilt Windows Security ML jobs?	1	81	March 14, 2025
TypeError: t is not a function	2	65	October 31, 2025
ML anomaly detection alert	1	78	April 22, 2025
Elastic SIEM Alert hostname missing	1	77	May 5, 2025
Missing md5 field in Harmony Email & Collaboration integration with Elastic	2	57	September 16, 2025
Error after creating Detection rules in Elastic Security; Not getting alerts	3	47	April 16, 2026
Timeline template isn't being applied properly over threshold rules	1	66	September 3, 2024
Timeline filter always overwriting first value	2	50	September 6, 2024
Elastic Rule Alert With External hyper link field creation in highlighted Fields [feature request]	3	44	March 13, 2026
Workflows' Connectors in DaC	1	33	May 7, 2026
RBAC Query	2	45	December 10, 2024
DNS Tunneling job failing to start	1	55	September 24, 2024
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes	1	54	May 23, 2025
Indicator matching rule with MISP intel with too long duration	1	53	August 20, 2024
Security Case Management Based on Parent Tenant & Subsidiary	1	51	May 22, 2025
Database Use case for DDL and DML command license	1	50	December 18, 2024
'add agent' issue	1	40	June 18, 2025
CEF integration gives error if it encounters non-UTF-8 valuestion	1	38	May 14, 2025
[Custom API] Integration via GUI	1	34	February 20, 2026
UX improvements (Security app)	1	28	April 16, 2026
Cofense Intelligence (ti integration)	0	20	April 27, 2026