SIEM - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Question About the ‘Supplied Configurations’ Section in Anomaly Detection for Time Series Data with Machine Learning on Elastic Cloud 8.17	4	73	January 2, 2025
Closing an alert in Elastic Security without using the GUI	0	163	March 24, 2025
Notification from machine learning job per anomaly score	0	161	April 10, 2024
Correlation Query for spam email - not working	0	156	February 27, 2024
Unable to source and feed in the correct information in src country	3	76	August 4, 2024
Log Stoppage Monitoring	0	149	April 29, 2024
Share cases between spaces	0	146	April 11, 2024
Machine learning rules : where to apply the high_non_zero_count function	0	137	April 29, 2024
Create new Event Renderers	1	92	March 6, 2025
Elastic Rule Alert With External hyper link field creation in highlighted Fields [feature request]	2	74	February 13, 2026
FIM and Windows Updates Best Practices	0	127	September 11, 2024
Versions of components used in elasticsearch:8.12.2 and 8.12.0 docker	0	127	June 19, 2024
UX improvements (Security app)	1	85	April 16, 2026
Wrong ML Job query packetbeat_rare_user_agent or missing event.dataset in network traffic data?	2	68	April 29, 2025
Missing md5 field in Harmony Email & Collaboration integration with Elastic	1	83	August 19, 2025
How to expose custom fields from alert JSON in the Slack API connector?	0	116	May 14, 2025
Least-Privilege To View All Server Asset Sending Logs	0	111	May 8, 2024
Hunt dashboard dashboard	0	101	August 29, 2024
Enriching Web Filter Logs with Username from Traffic Logs Using Session ID in Fortinet Logs	0	99	May 9, 2025
Issue with Elastic Agent Imperva Integration	0	99	February 11, 2025
How to reduce false/positives for prebuilt Windows Security ML jobs?	0	91	February 14, 2025
ML anomaly detection alert	0	84	March 25, 2025
Elastic SIEM Alert hostname missing	0	83	April 7, 2025
Timeline filter always overwriting first value	1	54	August 9, 2024
Timeline template isn't being applied properly over threshold rules	0	69	August 6, 2024
'add agent' issue	0	65	May 21, 2025
Security Case Management Based on Parent Tenant & Subsidiary	0	64	April 24, 2025
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes	0	62	April 25, 2025
DNS Tunneling job failing to start	0	61	August 27, 2024
Cofense Intelligence (ti integration)	0	59	April 27, 2026
[Custom API] Integration via GUI	0	58	January 23, 2026
Indicator matching rule with MISP intel with too long duration	0	58	July 23, 2024
Database Use case for DDL and DML command license	0	57	November 20, 2024
RBAC Query	0	54	November 12, 2024
CEF integration gives error if it encounters non-UTF-8 valuestion	0	46	April 16, 2025
Managing Ammunition Link Inventory Data with Search and Analytics Systems	0	21	July 7, 2026