Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Considerations about default terms agg for Elastic SIEM Detections histogram	1	377	June 15, 2020
Update prebuilt ML jobs	1	473	June 14, 2020
Sysmon v.11 and new 'file delete' event without archive	3	1567	June 11, 2020
Elastic SIEM for MSSP	6	2391	June 11, 2020
Auditbeat OSS fails to start	2	1967	June 10, 2020
Permission to read SIEM signal index elastic-stack-security	6	1598	June 10, 2020
FIM module in auditbeat keeps too many file handles open on Kubrenetes	2	496	June 8, 2020
Fetching Cisco , Firewall logs from syslog-ng server	10	1678	June 8, 2020
Aggregation facility in the detections rules tab?	1	458	June 5, 2020
Addition of other visualizations in Elastic-SIEM dashboards	1	452	June 5, 2020
Correlation in Elastic-SIEM	1	501	June 4, 2020
SIEM Alert Actions not updating	5	681	June 2, 2020
SIEM -- Event Columns (Only Default Category)	8	936	June 1, 2020
Graylog logs directed to Elastic SIEM	5	2673	June 1, 2020
Kibana SIEM app performance	10	1315	May 29, 2020
Create custom rule to monitor the logins only in day time?	2	632	April 28, 2020
Cisco Umbrella Ingest	1	1044	May 25, 2020
Alerting by amount of "hits"	1	461	May 21, 2020
Event correlation in 7.7 elastic-stack-alerting	1	1554	May 21, 2020
SSH auth logs not visualized in Kibana	5	2484	May 19, 2020
Filebeat Cisco Module: Listening on IPV6 only?	1	1040	May 19, 2020
False positive on SIEM rule SSH to the Internet	3	523	May 18, 2020
Can Elastic SIEM have a Group By feature in the Timelines?	4	611	May 15, 2020
Unifi Ubiquity USG IPS Suricata Filebeat Logging	2	1351	May 14, 2020
Bytes In / Bytes Out Empty	1	676	May 13, 2020
SIEM Network Page Queries all indexes	4	1036	May 13, 2020
Timelines Event Renderer - Why I don't see this in my timeline	3	979	May 6, 2020
False Positive - RPC (Remote Procedure Call) to the Internet (Kuery)	2	471	May 6, 2020
Do we have SIEM dashboards and detection anomaly for DHCP logs?	3	1185	May 6, 2020
Field case sensitivity and detection rules not triggering 'clear-eventlog'	3	888	April 29, 2020