SIEM - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Elastic Rule Alert With External hyper link field creation in highlighted Fields [feature request]	2	114	February 13, 2026
Sysmon registry logs don't get to elastic windows	0	182	February 19, 2025
Closing an alert in Elastic Security without using the GUI	0	178	March 24, 2025
Create Detection Rules via TF	0	177	April 23, 2024
Question About the ‘Supplied Configurations’ Section in Anomaly Detection for Time Series Data with Machine Learning on Elastic Cloud 8.17	4	78	January 2, 2025
Unable to source and feed in the correct information in src country	3	87	August 4, 2024
UX improvements (Security app)	1	123	April 16, 2026
Notification from machine learning job per anomaly score	0	167	April 10, 2024
Correlation Query for spam email - not working	0	157	February 27, 2024
Missing md5 field in Harmony Email & Collaboration integration with Elastic	1	111	August 19, 2025
Log Stoppage Monitoring	0	150	April 29, 2024
Share cases between spaces	0	147	April 11, 2024
Machine learning rules : where to apply the high_non_zero_count function	0	143	April 29, 2024
Create new Event Renderers	1	101	March 6, 2025
How to expose custom fields from alert JSON in the Slack API connector?	0	141	May 14, 2025
FIM and Windows Updates Best Practices	0	130	September 11, 2024
Versions of components used in elasticsearch:8.12.2 and 8.12.0 docker	0	129	June 19, 2024
Wrong ML Job query packetbeat_rare_user_agent or missing event.dataset in network traffic data?	2	73	April 29, 2025
Least-Privilege To View All Server Asset Sending Logs	0	112	May 8, 2024
Enriching Web Filter Logs with Username from Traffic Logs Using Session ID in Fortinet Logs	0	110	May 9, 2025
Issue with Elastic Agent Imperva Integration	0	106	February 11, 2025
How to reduce false/positives for prebuilt Windows Security ML jobs?	0	104	February 14, 2025
Hunt dashboard dashboard	0	102	August 29, 2024
Elastic SIEM Alert hostname missing	0	91	April 7, 2025
ML anomaly detection alert	0	88	March 25, 2025
Cofense Intelligence (ti integration)	0	82	April 27, 2026
[Custom API] Integration via GUI	0	79	January 23, 2026
Timeline filter always overwriting first value	1	55	August 9, 2024
Security Case Management Based on Parent Tenant & Subsidiary	0	73	April 24, 2025
'add agent' issue	0	72	May 21, 2025
Timeline template isn't being applied properly over threshold rules	0	72	August 6, 2024
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes	0	67	April 25, 2025
Database Use case for DDL and DML command license	0	64	November 20, 2024
DNS Tunneling job failing to start	0	63	August 27, 2024
Indicator matching rule with MISP intel with too long duration	0	60	July 23, 2024
RBAC Query	0	59	November 12, 2024
CEF integration gives error if it encounters non-UTF-8 valuestion	0	48	April 16, 2025
Managing Ammunition Link Inventory Data with Search and Analytics Systems	0	46	July 7, 2026
Multiple Machine Learning Alerts by Influencer Field failing Unknown column [job_id]	0	39	August 18, 2026