Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Why don't sudo events from auth.log have an event.category/event.action?	2	486	September 4, 2019
SIEM Hosts/All Hosts Tables Empty	12	2536	September 2, 2019
Watcher alert, ssh auth elastic-stack-alerting	2	633	August 28, 2019
Empty DNS Fields and Tables in Network View	2	503	August 27, 2019
Having SIEM read windows events from non-default index pattern	3	574	August 26, 2019
Zeek DNS Logs Into Top DNS Domains Section	2	641	August 26, 2019
Inserting Custom Logs Into Siem	4	734	August 20, 2019
SIEM Zeek log data getting Error decoding JSON	4	2281	August 15, 2019
FortiAnalyzer logs to SIEM	2	3127	August 15, 2019
Failed Logins	4	2391	August 14, 2019
SOAR for Elastic Capabilities	2	2203	August 14, 2019
SIEM Elastic - Beta -7.2 - Cisco module - unable to see data	3	1096	August 14, 2019
Auditbeat file integrity monitoring does not show user who made changes to file	5	1095	August 13, 2019
Elastic SIEM integration with Ansible for Security Automation	4	1878	August 12, 2019
Uncommon Processes	2	1636	August 12, 2019
Drilling into Suricata data	5	2152	August 8, 2019
Last Seen timestamp under Hosts section appears to be incorrect	3	652	August 8, 2019
Trouble with Index Patterns	13	3809	August 2, 2019
Configuring SIEM	3	763	August 2, 2019
Netflow data ingested but not showing under SIEM \| Network	3	927	August 1, 2019
Role to provide access to SIEM?	3	480	August 1, 2019
SIEM not ingesting Windows logs from servers	8	1457	July 31, 2019
Inserting Logs into SIEM	3	1066	July 31, 2019
SIEM Parsing	2	1065	July 29, 2019
Host.hostname field bug	7	1708	July 29, 2019
Lists	2	532	July 29, 2019