Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Enriching Web Filter Logs with Username from Traffic Logs Using Session ID in Fortinet Logs	0	97	May 9, 2025
Import ingest pipeline	1	94	May 6, 2025
Error in detection rule: Remote Computer Account DnsHostName Update	8	106	May 3, 2025
Wrong ML Job query packetbeat_rare_user_agent or missing event.dataset in network traffic data?	2	68	April 29, 2025
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes	0	60	April 25, 2025
Firewall logs to different Datastream by type	22	384	April 24, 2025
Security Case Management Based on Parent Tenant & Subsidiary	0	61	April 24, 2025
CEF integration gives error if it encounters non-UTF-8 valuestion	0	46	April 16, 2025
Does Common Event Format (CEF) not allow a custom ingestion pipeline?	4	108	April 11, 2025
Elastic SIEM Alert hostname missing	0	82	April 7, 2025
EQL Detection Rule issues	1	167	April 4, 2025
Closing an alert in Elastic Security without using the GUI	0	160	March 24, 2025
ML anomaly detection alert	0	84	March 25, 2025
Create new Event Renderers	1	92	March 6, 2025
After upgrading Elastic SIEM to version 8.17.2 a lot security alerts are not being displayed.	0	85	February 27, 2025
Sysmon registry logs don't get to elastic windows	0	171	February 19, 2025
How to reduce false/positives for prebuilt Windows Security ML jobs?	0	90	February 14, 2025
How to Retrieve More Than 10K Records in EQL (_eql/search)? (Elasticsearch 7.10.1)	1	196	February 11, 2025
Issue with Elastic Agent Imperva Integration	0	99	February 11, 2025
Question About the ‘Supplied Configurations’ Section in Anomaly Detection for Time Series Data with Machine Learning on Elastic Cloud 8.17	4	73	January 2, 2025
Regarding Cross cluster replication	4	164	December 24, 2024
Kibana Query Language summarize	4	303	November 25, 2024
Database Use case for DDL and DML command license	0	57	November 20, 2024
RBAC Query	0	54	November 12, 2024
Elastic SIEM Detection Rules	1	167	November 12, 2024
Cannot view alerted log in security alert	4	122	October 22, 2024
Detection Rules Integration Dependencies	4	148	October 16, 2024
The suricata results shown on the [filebeat dashboard] are different from the results shown in the [security -> alerts] on kibana	1	237	October 1, 2024
How to import suricate.rules into SIEM deteciton rules?	1	158	October 1, 2024
Carbon Black Cloud: CEL alert_v7 400 bad request	5	133	September 27, 2024