Latest SIEM topics - Discuss the Elastic Stack

Topic	Replies	Views	Activity
False Positives in the 1000's	2	528	October 21, 2021
Single behavior generates several alerts	4	1213	October 19, 2021
Threat intel integration	4	499	October 13, 2021
Looking for a list of "Out of the Box" Use Cases for Elastic SIEM	2	2410	October 11, 2021
Run Elastic detection rule in non real time logs	2	719	October 9, 2021
Packetbeat 7.14.1 process.env not added to the document	1	270	October 6, 2021
Find exceptions in indices	1	283	October 6, 2021
Threshold Rule type - not able to send more than three field values in email action	1	354	October 5, 2021
Watch configuration (advance watch - Jason queries for cyber security)	5	539	August 31, 2021
Reduce duplicate signals/ alerts detection-rules	1	846	September 26, 2021
Common File for adding email address in SIEM Detection email action elastic-stack-alerting , detection-rules	2	389	September 26, 2021
Will elastic agent support more beats in future? fleet	3	437	September 21, 2021
Alerts dont match time on server	3	1487	September 17, 2021
Detection Rules don't alert	5	940	September 10, 2021
Elastic SIEM TheHive Integration	2	2512	September 7, 2021
Default DIsable Alert Sync for new Cases	4	490	September 2, 2021
Threshold Rule type - not able to send more than three field values in email action elastic-stack-alerting , detection-rules	1	424	August 31, 2021
SIEM Webhook	1	316	September 1, 2021
Elastic Entreprise SIEM question	3	491	September 1, 2021
Wrong hosts last event elastic siem	1	320	August 30, 2021
How do you specify the "forbidden hours" in the Detection Rule "Auditd Login Attempt at Forbidden Time" detection-rules	3	627	August 25, 2021
Difference between (event.module: system - event.action: user_login) AND (event.module: auditd - event.action: logged-in) ecs-elastic-common-schema , detection-rules	3	928	August 24, 2021
ElasticSIEM unable to find [logs-endpoint.alerts	12	4182	August 18, 2021
Assign Single Exception to Multiple Detection Rules detection-rules	2	405	August 13, 2021
Cases as Metrics	1	338	August 10, 2021
Auditing all Linux clients with centralised server elastic-stack-monitoring	4	538	August 7, 2021
Retrieve Documents in Threshold Signal detection-rules	6	930	August 3, 2021
Detection Rule with query issues detection-rules	5	913	August 3, 2021
Authentications zero successes - SIEM	3	429	July 29, 2021
Unusual Process For a Windows Host (rare_process_by_host_windows_ecs) elastic-stack-machine-learning	5	558	July 29, 2021