Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Problem with SIEM	7	903	October 22, 2019
For example, I have machine A running as a Server and I would like to manage other clients such as machine B, C, D,...etc So, how to do that? How to get many hosts?	20	1180	October 22, 2019
How to change query in SIEM	2	690	October 21, 2019
SIEM not detecting ASA success failure logins	5	1720	October 19, 2019
Active Directory logs and mapping to ECS (I am stumped) ecs-elastic-common-schema	6	8757	October 14, 2019
SIEM Command Line Auditing 4688 - 4689	10	2443	October 14, 2019
How to get more hosts in SIEM (Auditbeat)	1	651	October 2, 2019
Defenxor DSIEM for Event Correlation with Logstash	0	805	September 30, 2019
SIEM Infrastructure design	1	696	September 30, 2019
Filter Uncommon Host Processes	2	855	September 27, 2019
Hash used in Elastic?	2	1119	September 27, 2019
SIEM ECS descriptions taking huge amount of unneccesary space in SIEM	1	624	September 27, 2019
How many swap files are created when you update a text file	8	926	September 26, 2019
Add additional data source to SIEM dashboard	3	728	September 18, 2019
Hosts tab in SIEM and WEF	16	2316	September 16, 2019
SonicWall Firewall and SIEM or SNMP	1	2356	September 15, 2019
Envoyproxy	2	841	September 7, 2019
Fielddata error preventing Authentications tab populating	3	601	September 4, 2019
PoC - Use ELK to aggregate multiple LogInsight Systems into one SOC	2	797	September 3, 2019
Siem on logstash and filebeat	1	669	August 30, 2019
Event Correlation on ELK	2	7991	August 26, 2019
GraphQL internal error	1	566	August 19, 2019
Difference between source/destination and server/client ecs-elastic-common-schema	1	2390	August 16, 2019
I'm not seeing any geoip data from my zeek logs in my SIEM map	2	995	August 12, 2019
Filebeat for Sophos XG Firewall	8	3044	August 7, 2019
Why don't sudo events from auth.log have an event.category/event.action?	1	522	August 7, 2019
SIEM Hosts/All Hosts Tables Empty	11	2655	August 5, 2019
Watcher alert, ssh auth elastic-stack-alerting	1	669	July 31, 2019
Empty DNS Fields and Tables in Network View	1	548	July 30, 2019
Having SIEM read windows events from non-default index pattern	2	621	July 29, 2019