|
Adding alers to cases in bulk
|
|
1
|
189
|
May 15, 2024
|
|
Cisco Umbrella Ingest
|
|
1
|
1048
|
May 25, 2020
|
|
Add additional data source to SIEM dashboard
|
|
3
|
740
|
September 18, 2019
|
|
Filebeat Cisco Module: Listening on IPV6 only?
|
|
1
|
1045
|
May 19, 2020
|
|
Envoyproxy
|
|
2
|
847
|
September 7, 2019
|
|
Adding a condition in detection engine
|
|
1
|
1030
|
April 10, 2020
|
|
Send Linux/Windows/NetworkDevices logs to Elastic SIEM
|
|
1
|
1026
|
June 26, 2020
|
|
SIEM Event Correlation rule returns no data
|
|
3
|
721
|
December 17, 2021
|
|
Just a question about a siem rule filter
|
|
3
|
716
|
November 30, 2020
|
|
Elastic Security Rule exception
|
|
1
|
1012
|
March 22, 2022
|
|
Can Someone Help me Configure Suricata Filebeat on elastic cloud?
|
|
1
|
1012
|
November 21, 2019
|
|
PoC - Use ELK to aggregate multiple LogInsight Systems into one SOC
|
|
2
|
803
|
September 3, 2019
|
|
Email Action for Detection Rule
|
|
2
|
799
|
April 15, 2021
|
|
Aggregating Case Information
|
|
4
|
618
|
January 14, 2022
|
|
Can Elastic SIEM have a Group By feature in the Timelines?
|
|
4
|
617
|
May 15, 2020
|
|
Auditd Logs 3.24.1 - "Use auditd parser" fails on Elastic 9.3.3 with Missing helper: semverSatisfies
|
|
1
|
97
|
August 19, 2026
|
|
Unusual Process For a Windows Host (rare_process_by_host_windows_ecs)
|
|
4
|
613
|
July 1, 2021
|
|
EQL - Rule creation
|
|
1
|
543
|
August 31, 2022
|
|
Exceptions in rules through DaC
|
|
2
|
139
|
February 9, 2026
|
|
{{#context.alerts}} not showing up in markdown
|
|
2
|
781
|
June 16, 2021
|
|
Update detection rules from elastic github repository to on-premises
|
|
2
|
778
|
August 4, 2020
|
|
Rules in ElasticSIEM not create signals
|
|
4
|
605
|
April 16, 2020
|
|
Winlogbeat 7.9 not shipping logs in full ECS?
|
|
3
|
672
|
September 24, 2020
|
|
D365 cloud based solution
|
|
1
|
526
|
February 19, 2021
|
|
Can I change the primary key for identifying hosts in the SIEM app?
|
|
3
|
655
|
August 4, 2020
|
|
Multiple index search
|
|
5
|
530
|
April 3, 2023
|
|
Watch configuration (advance watch - Jason queries for cyber security)
|
|
4
|
574
|
August 31, 2021
|
|
Detection Rule Key Value Reference Url's
|
|
5
|
519
|
May 22, 2021
|
|
EQL rules do not work but see hits
|
|
2
|
730
|
February 14, 2022
|
|
Elastic SIEM - Adding more data
|
|
1
|
889
|
December 17, 2019
|
|
Threat hunting with suricata, ElasticSecurity
|
|
1
|
883
|
May 17, 2021
|
|
Detection not finding anything but same query finds them
|
|
5
|
509
|
February 27, 2021
|
|
Unable to start audit beat
|
|
0
|
1243
|
November 27, 2019
|
|
Elastic Search not work with evebox
|
|
5
|
499
|
March 14, 2024
|
|
Reporting email action failure from watcher - ELK7.8
|
|
2
|
695
|
March 18, 2021
|
|
How to change query in SIEM
|
|
2
|
693
|
October 21, 2019
|
|
Edit Telnet port Activity rule
|
|
2
|
690
|
March 22, 2021
|
|
SIEM Overview Page : Modify Security Settings Kibana
|
|
4
|
527
|
August 10, 2020
|
|
Rule failure for Windows path exclusions?
|
|
4
|
526
|
December 9, 2020
|
|
Last Seen timestamp under Hosts section appears to be incorrect
|
|
2
|
679
|
July 11, 2019
|
|
Siem anomaly detection prebuild jobs
|
|
1
|
830
|
January 2, 2020
|
|
Signal SIEM Detections using log files
|
|
4
|
524
|
April 25, 2020
|
|
Security events and rules matching
|
|
2
|
677
|
July 26, 2022
|
|
Elastic Detection Actions - any way to add fields?
|
|
1
|
463
|
March 28, 2022
|
|
Cloudflare integration Logpull not working
|
|
2
|
666
|
June 1, 2022
|
|
Auditing all Linux clients with centralised server
|
|
3
|
575
|
July 10, 2021
|
|
Create a rule to detect number of beats
|
|
4
|
513
|
April 28, 2021
|
|
Rules failing
|
|
2
|
662
|
December 18, 2023
|
|
[SIEM] Authentications table doesn't show 'Last Success/Failed Source' column if only 'source.ip' is present
|
|
6
|
431
|
January 19, 2021
|
|
SIEM feature request
|
|
3
|
569
|
November 10, 2020
|