Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Elastic Security Rule exception	2	822	April 19, 2022
Update field on all SIEM detection Rules in one go	6	437	April 18, 2022
Migration from ELK to Azure Sentinel	1	743	April 12, 2022
Send sophos logs via filebeat to elasticsearch ( ubuntu 20.04 )	2	394	April 11, 2022
Parsing message field from CEF logs	5	1541	April 5, 2022
Missing index .siem-signals-default	5	1619	April 4, 2022
Over 110 detections crash SIEM application and Kibana plugins	19	1998	April 4, 2022
Elastic Agent 8.0.0 on macOS 12.x	4	1234	March 31, 2022
Upgrading/Updating SIEM rules	3	546	March 24, 2022
EQL rules do not work but see hits kql-kibana-query-language , eql-elastic-query-language	3	642	March 14, 2022
Issue while Restore the indexes from snapshot backup	1	397	March 12, 2022
Custom EQL Query where one event happened and another didnt eql-elastic-query-language	1	437	March 7, 2022
Feature Question around KPI Visualisation	1	351	March 4, 2022
Get the most out of Elastic Security - Ubuntu and Windows Servers	8	686	February 28, 2022
Failing to get Detection Alerts detection-rules	2	529	February 24, 2022
Creating a case for an alert automatically	3	1385	February 24, 2022
Unable to seeing any lines (Host & Destination )on the Network tab in Elastic Security	1	356	February 23, 2022
Fleet and Suricata for Elastic Security fleet	2	1167	February 23, 2022
Siem Rule Duplication - Query Not Changed Despite Rule Edit	1	311	February 23, 2022
SIEM News feed on securitySolution:enableNewsFeed(Advance Settings) is not working	1	393	February 18, 2022
How to aggregate alerts?	1	551	February 15, 2022
Elastic Security Integeration with Huawei firewall	8	1108	February 11, 2022
Aggregating Case Information	5	520	February 11, 2022
Unable to seeing any of the “pew pew” lines on the Network tab in Elastic Security	1	393	February 10, 2022
No data showing in SIEM Detection tab detection-rules	5	705	February 8, 2022
Threshold Rule type - not able to send more than three field values in email action	2	411	February 4, 2022
Wazuh SIEM + Winlogbeat	3	1512	February 4, 2022
Elastic Agent No upgrade option Available	2	574	February 4, 2022
Linux_anomalous_process_all_hosts_ecs apparently not only covering Linux, but full auditbeat elastic-stack-machine-learning	3	556	February 3, 2022
Detection Rule - Output of a aggregation bucket should match with other types of logs in the same index	2	704	February 2, 2022