Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
Threshold Rule type - not able to send more than three field values in email action	1	346	October 5, 2021
Watch configuration (advance watch - Jason queries for cyber security)	5	518	August 31, 2021
Reduce duplicate signals/ alerts detection-rules	1	823	September 26, 2021
Common File for adding email address in SIEM Detection email action elastic-stack-alerting , detection-rules	2	376	September 26, 2021
Will elastic agent support more beats in future? fleet	3	425	September 21, 2021
Alerts dont match time on server	3	1322	September 17, 2021
Detection Rules don't alert	5	871	September 10, 2021
Elastic SIEM TheHive Integration	2	2381	September 7, 2021
Default DIsable Alert Sync for new Cases	4	472	September 2, 2021
Threshold Rule type - not able to send more than three field values in email action elastic-stack-alerting , detection-rules	1	408	August 31, 2021
SIEM Webhook	1	301	September 1, 2021
Elastic Entreprise SIEM question	3	463	September 1, 2021
Wrong hosts last event elastic siem	1	314	August 30, 2021
How do you specify the "forbidden hours" in the Detection Rule "Auditd Login Attempt at Forbidden Time" detection-rules	3	597	August 25, 2021
Difference between (event.module: system - event.action: user_login) AND (event.module: auditd - event.action: logged-in) ecs-elastic-common-schema , detection-rules	3	823	August 24, 2021
ElasticSIEM unable to find [logs-endpoint.alerts	12	3804	August 18, 2021
Assign Single Exception to Multiple Detection Rules detection-rules	2	388	August 13, 2021
Cases as Metrics	1	315	August 10, 2021
Auditing all Linux clients with centralised server elastic-stack-monitoring	4	510	August 7, 2021
Retrieve Documents in Threshold Signal detection-rules	6	867	August 3, 2021
Detection Rule with query issues detection-rules	5	858	August 3, 2021
Authentications zero successes - SIEM	3	414	July 29, 2021
Unusual Process For a Windows Host (rare_process_by_host_windows_ecs) elastic-stack-machine-learning	5	519	July 29, 2021
Using "message" in custom alert rule	3	524	July 23, 2021
ThreatIntel + module configuration	2	545	July 23, 2021
Threat detection rules VS beats	2	423	July 23, 2021
Creating an email connector	5	702	July 21, 2021
{{#context.alerts}} not showing up in markdown	3	683	July 14, 2021
Detections - Kibana	8	858	July 11, 2021
EQL library where	2	691	July 10, 2021