Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Rules don't trigger and preview window is empty	7	1573	April 21, 2022
Elastic Security Rule exception	2	932	April 19, 2022
Update field on all SIEM detection Rules in one go	6	475	April 18, 2022
Migration from ELK to Azure Sentinel	1	789	April 12, 2022
Send sophos logs via filebeat to elasticsearch ( ubuntu 20.04 )	2	413	April 11, 2022
Parsing message field from CEF logs	5	1802	April 5, 2022
Missing index .siem-signals-default	5	1813	April 4, 2022
Over 110 detections crash SIEM application and Kibana plugins	19	2067	April 4, 2022
Elastic Agent 8.0.0 on macOS 12.x	4	1280	March 31, 2022
Upgrading/Updating SIEM rules	3	587	March 24, 2022
EQL rules do not work but see hits kql-kibana-query-language , eql-elastic-query-language	3	674	March 14, 2022
Issue while Restore the indexes from snapshot backup	1	405	March 12, 2022
Custom EQL Query where one event happened and another didnt eql-elastic-query-language	1	468	March 7, 2022
Feature Question around KPI Visualisation	1	372	March 4, 2022
Get the most out of Elastic Security - Ubuntu and Windows Servers	8	735	February 28, 2022
Failing to get Detection Alerts detection-rules	2	548	February 24, 2022
Creating a case for an alert automatically	3	1565	February 24, 2022
Unable to seeing any lines (Host & Destination )on the Network tab in Elastic Security	1	359	February 23, 2022
Fleet and Suricata for Elastic Security fleet	2	1239	February 23, 2022
Siem Rule Duplication - Query Not Changed Despite Rule Edit	1	319	February 23, 2022
SIEM News feed on securitySolution:enableNewsFeed(Advance Settings) is not working	1	401	February 18, 2022
How to aggregate alerts?	1	578	February 15, 2022
Elastic Security Integeration with Huawei firewall	8	1232	February 11, 2022
Aggregating Case Information	5	549	February 11, 2022
Unable to seeing any of the “pew pew” lines on the Network tab in Elastic Security	1	398	February 10, 2022
No data showing in SIEM Detection tab detection-rules	5	728	February 8, 2022
Threshold Rule type - not able to send more than three field values in email action	2	415	February 4, 2022
Wazuh SIEM + Winlogbeat	3	1713	February 4, 2022
Elastic Agent No upgrade option Available	2	593	February 4, 2022
Linux_anomalous_process_all_hosts_ecs apparently not only covering Linux, but full auditbeat elastic-stack-machine-learning	3	569	February 3, 2022