Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Zeek dns logs show only as zeek.notice leaving dns fields empty beats-module	1	980	December 11, 2019
Autonomous System Number (ASN) not displaying	4	1491	November 29, 2019
Viewing Pinned Timeline Events	2	768	November 22, 2019
Bulk ingest of netflow and zeek logs into Elastic SIEM	2	1252	November 21, 2019
New SIEM infrastructure with Elasticsearch	4	787	November 19, 2019
Problem with SIEM	8	822	November 19, 2019
For example, I have machine A running as a Server and I would like to manage other clients such as machine B, C, D,...etc So, how to do that? How to get many hosts?	21	1010	November 19, 2019
How to change query in SIEM	3	647	November 18, 2019
SIEM not detecting ASA success failure logins	6	1650	November 16, 2019
Active Directory logs and mapping to ECS (I am stumped) ecs-elastic-common-schema	7	7988	November 11, 2019
SIEM Command Line Auditing 4688 - 4689	11	2185	November 11, 2019
How to get more hosts in SIEM (Auditbeat)	2	623	October 30, 2019
Defenxor DSIEM for Event Correlation with Logstash	1	794	October 28, 2019
SIEM Infrastructure design	2	641	October 28, 2019
Filter Uncommon Host Processes	3	818	October 25, 2019
Hash used in Elastic?	3	933	October 25, 2019
SIEM ECS descriptions taking huge amount of unneccesary space in SIEM	2	606	October 25, 2019
How many swap files are created when you update a text file	9	827	October 24, 2019
Add additional data source to SIEM dashboard	4	677	October 16, 2019
Hosts tab in SIEM and WEF	17	2080	October 14, 2019
SonicWall Firewall and SIEM or SNMP	2	2285	October 13, 2019
Envoyproxy	3	813	October 5, 2019
Fielddata error preventing Authentications tab populating	4	550	October 2, 2019
PoC - Use ELK to aggregate multiple LogInsight Systems into one SOC	3	729	October 1, 2019
Siem on logstash and filebeat	2	635	September 27, 2019
Event Correlation on ELK	3	7561	September 23, 2019
GraphQL internal error	2	543	September 16, 2019
Difference between source/destination and server/client ecs-elastic-common-schema	2	2252	September 13, 2019
I'm not seeing any geoip data from my zeek logs in my SIEM map	3	939	September 9, 2019
Filebeat for Sophos XG Firewall	9	2938	September 4, 2019