SIEM - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Elastic - MISP Integration shows total Indicators ( fortigate logs) painless	5	59	February 24, 2026
Refer to value lists in ES\|QL? esql	1	57	January 14, 2026
Unable to source and feed in the correct information in src country	6	52	September 1, 2024
Import ingest pipeline	2	78	June 3, 2025
Create new Event Renderers	2	77	April 3, 2025
Hunt dashboard dashboard	1	86	September 26, 2024
Wrong ML Job query packetbeat_rare_user_agent or missing event.dataset in network traffic data?	3	58	May 27, 2025
TypeError: t is not a function	2	65	October 31, 2025
How to expose custom fields from alert JSON in the Slack API connector?	1	78	July 18, 2025
Elastic SIEM Alert hostname missing	1	76	May 5, 2025
How to reduce false/positives for prebuilt Windows Security ML jobs?	1	75	March 14, 2025
Issue with Elastic Agent Imperva Integration	1	74	March 11, 2025
Enriching Web Filter Logs with Username from Traffic Logs Using Session ID in Fortinet Logs	1	71	June 6, 2025
ML anomaly detection alert	1	70	April 22, 2025
Missing md5 field in Harmony Email & Collaboration integration with Elastic	2	53	September 16, 2025
Timeline template isn't being applied properly over threshold rules	1	61	September 3, 2024
Timeline filter always overwriting first value	2	48	September 6, 2024
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes	1	54	May 23, 2025
RBAC Query	2	43	December 10, 2024
DNS Tunneling job failing to start	1	51	September 24, 2024
Indicator matching rule with MISP intel with too long duration	1	51	August 20, 2024
Security Case Management Based on Parent Tenant & Subsidiary	1	46	May 22, 2025
Database Use case for DDL and DML command license	1	45	December 18, 2024
Elastic Rule Alert With External hyper link field creation in highlighted Fields [feature request]	2	34	February 13, 2026
'add agent' issue	1	38	June 18, 2025
CEF integration gives error if it encounters non-UTF-8 valuestion	1	36	May 14, 2025
[Custom API] Integration via GUI	1	25	February 20, 2026