Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
SIEM Command Line Auditing 4688 - 4689	10	2404	October 14, 2019
How to get more hosts in SIEM (Auditbeat)	1	643	October 2, 2019
Defenxor DSIEM for Event Correlation with Logstash	0	803	September 30, 2019
SIEM Infrastructure design	1	689	September 30, 2019
Filter Uncommon Host Processes	2	851	September 27, 2019
Hash used in Elastic?	2	1100	September 27, 2019
SIEM ECS descriptions taking huge amount of unneccesary space in SIEM	1	621	September 27, 2019
How many swap files are created when you update a text file	8	907	September 26, 2019
Add additional data source to SIEM dashboard	3	713	September 18, 2019
Hosts tab in SIEM and WEF	16	2267	September 16, 2019
SonicWall Firewall and SIEM or SNMP	1	2347	September 15, 2019
Envoyproxy	2	836	September 7, 2019
Fielddata error preventing Authentications tab populating	3	595	September 4, 2019
PoC - Use ELK to aggregate multiple LogInsight Systems into one SOC	2	787	September 3, 2019
Siem on logstash and filebeat	1	666	August 30, 2019
Event Correlation on ELK	2	7967	August 26, 2019
GraphQL internal error	1	554	August 19, 2019
Difference between source/destination and server/client ecs-elastic-common-schema	1	2383	August 16, 2019
I'm not seeing any geoip data from my zeek logs in my SIEM map	2	986	August 12, 2019
Filebeat for Sophos XG Firewall	8	3027	August 7, 2019
Why don't sudo events from auth.log have an event.category/event.action?	1	521	August 7, 2019
SIEM Hosts/All Hosts Tables Empty	11	2635	August 5, 2019
Watcher alert, ssh auth elastic-stack-alerting	1	666	July 31, 2019
Empty DNS Fields and Tables in Network View	1	545	July 30, 2019
Having SIEM read windows events from non-default index pattern	2	614	July 29, 2019
Zeek DNS Logs Into Top DNS Domains Section	1	673	July 29, 2019
Inserting Custom Logs Into Siem	3	780	July 23, 2019
SIEM Zeek log data getting Error decoding JSON	3	2409	July 18, 2019
FortiAnalyzer logs to SIEM	1	3590	July 18, 2019
Failed Logins	3	2474	July 17, 2019