Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Wrong hosts last event elastic siem	1	328	August 30, 2021
How do you specify the "forbidden hours" in the Detection Rule "Auditd Login Attempt at Forbidden Time" detection-rules	3	654	August 25, 2021
Difference between (event.module: system - event.action: user_login) AND (event.module: auditd - event.action: logged-in) ecs-elastic-common-schema , detection-rules	3	985	August 24, 2021
ElasticSIEM unable to find [logs-endpoint.alerts	12	4324	August 18, 2021
Assign Single Exception to Multiple Detection Rules detection-rules	2	422	August 13, 2021
Cases as Metrics	1	349	August 10, 2021
Auditing all Linux clients with centralised server elastic-stack-monitoring	4	552	August 7, 2021
Retrieve Documents in Threshold Signal detection-rules	6	973	August 3, 2021
Detection Rule with query issues detection-rules	5	950	August 3, 2021
Authentications zero successes - SIEM	3	444	July 29, 2021
Unusual Process For a Windows Host (rare_process_by_host_windows_ecs) elastic-stack-machine-learning	5	578	July 29, 2021
Using "message" in custom alert rule	3	550	July 23, 2021
ThreatIntel + module configuration	2	583	July 23, 2021
Threat detection rules VS beats	2	459	July 23, 2021
Creating an email connector	5	777	July 21, 2021
{{#context.alerts}} not showing up in markdown	3	760	July 14, 2021
Detections - Kibana	8	931	July 11, 2021
EQL library where	2	711	July 10, 2021
EQL cidrmatch issue eql-elastic-query-language	4	894	July 5, 2021
Signal Field Schema Documentation detection-rules	1	588	July 1, 2021
Discover is not working for range between <date> - "now "	3	410	July 1, 2021
Elastic agent log parsing	1	521	July 1, 2021
SIEM prebuilt rules	3	830	June 30, 2021
Detection rule: Failed login attempts	3	3935	June 30, 2021
Detection rule kquery will not trigger but the query match	4	1431	June 28, 2021
Threshold detection not working with group by elastic-stack-alerting	3	878	June 28, 2021
Detection Rule - Output of a aggregation bucket should match with other types of logs in the same index detection-rules	1	497	June 25, 2021
Timeline result of events not showing	9	1521	June 24, 2021
SIEM timeline cant be saved	4	507	June 22, 2021
Detection Rule Key Value Reference Url's	6	486	June 19, 2021