Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Error in detection rule: Remote Computer Account DnsHostName Update	9	97	May 31, 2025
Wrong ML Job query packetbeat_rare_user_agent or missing event.dataset in network traffic data?	3	61	May 27, 2025
Machine Learning Detected a Suspicious Windows Event with a High Malicious Probability Score triggering on all kinds of normal processes	1	54	May 23, 2025
Firewall logs to different Datastream by type	23	344	May 22, 2025
Security Case Management Based on Parent Tenant & Subsidiary	1	51	May 22, 2025
CEF integration gives error if it encounters non-UTF-8 valuestion	1	38	May 14, 2025
Does Common Event Format (CEF) not allow a custom ingestion pipeline?	5	103	May 9, 2025
Elastic SIEM Alert hostname missing	1	77	May 5, 2025
EQL Detection Rule issues	2	156	May 2, 2025
Closing an alert in Elastic Security without using the GUI	1	152	April 21, 2025
ML anomaly detection alert	1	78	April 22, 2025
Create new Event Renderers	2	89	April 3, 2025
After upgrading Elastic SIEM to version 8.17.2 a lot security alerts are not being displayed.	1	80	March 27, 2025
Sysmon registry logs don't get to elastic windows	1	163	March 19, 2025
How to reduce false/positives for prebuilt Windows Security ML jobs?	1	81	March 14, 2025
How to Retrieve More Than 10K Records in EQL (_eql/search)? (Elasticsearch 7.10.1)	2	181	March 11, 2025
Issue with Elastic Agent Imperva Integration	1	89	March 11, 2025
Question About the ‘Supplied Configurations’ Section in Anomaly Detection for Time Series Data with Machine Learning on Elastic Cloud 8.17	5	64	January 30, 2025
Regarding Cross cluster replication	5	149	January 21, 2025
Kibana Query Language summarize	5	281	December 23, 2024
Database Use case for DDL and DML command license	1	50	December 18, 2024
RBAC Query	2	45	December 10, 2024
Elastic SIEM Detection Rules	2	158	December 10, 2024
Cannot view alerted log in security alert	5	111	November 19, 2024
Detection Rules Integration Dependencies	5	143	November 13, 2024
The suricata results shown on the [filebeat dashboard] are different from the results shown in the [security -> alerts] on kibana	2	223	October 29, 2024
How to import suricate.rules into SIEM deteciton rules?	2	152	October 29, 2024
Carbon Black Cloud: CEL alert_v7 400 bad request	6	121	October 25, 2024
Exceptions matches escaping	3	332	October 21, 2024
Problem with CrowdStrike	15	984	October 15, 2024