# Assistance Required to Start Lab in Elastic Security for SIEM (On-Demand)

**URL:** <https://discuss.elastic.co/t/assistance-required-to-start-lab-in-elastic-security-for-siem-on-demand/379578>\
**Category:** Elastic Training\
**Created:** [June 28, 2025, 2:56am UTC](https://discuss.elastic.co/t/assistance-required-to-start-lab-in-elastic-security-for-siem-on-demand/379578 "2025-06-28T02:56:28Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pabloj](https://avatars.discourse-cdn.com/v4/letter/p/82dd89/32.png) [@Pabloj](https://discuss.elastic.co/u/Pabloj)\
**Post date:** [June 28, 2025, 2:56am UTC](https://discuss.elastic.co/t/assistance-required-to-start-lab-in-elastic-security-for-siem-on-demand/379578/1 "2025-06-28T02:56:28Z")

</div>

![LAB](https://us1.discourse-cdn.com/elastic/original/3X/b/d/bdaa47655790fec30e127af6e24aee53701b6ffa.png)  
Dear team,

I need assistance with starting the lab, as the _Challenges_ section does not display the questions. Instead, it states that the instructor will provide the unlock code. However, I am taking the _Elastic Security for SIEM (On-Demand)_ course, and there is no instructor available.

Could you please advise how I can resolve this issue?

Best regards,

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [June 28, 2025, 3:45am UTC](https://discuss.elastic.co/t/assistance-required-to-start-lab-in-elastic-security-for-siem-on-demand/379578/2 "2025-06-28T03:45:55Z")

</div>

Hello @Pabloj

The keys are already provided as part of the course :

Module 1 : **CTFd Flags**

================================================================  
3.1 - Discover - Getting Started with Kibana: acquisition  
3.2 - Discover - Searching with KQL and Lucene: \*\*\*\*\*\*  
4.1 - Visualizations: \*\*\*\*\*\*  
5.3 - Lens: \*\*\*\*\*\*  
6.2 - Dashboards: \*\*\*\*\*\*  
7.2 - Security App - Explore: \*\*\*\*\*\*  
7.3 - Security App - Detection Rules: \*\*\*\*\*\*  
7.4 - Security App - Alerts: \*\*\*\*\*\*  
7.5 - Security App - Timelines: \*\*\*\*\*\*

Thanks!!

---

<div class="post-metadata">

**Author:** ![Mr.Estro](https://avatars.discourse-cdn.com/v4/letter/m/8797f3/32.png) [@Mr.Estro](https://discuss.elastic.co/u/Mr.Estro)\
**Post date:** [July 3, 2025, 11:34pm UTC](https://discuss.elastic.co/t/assistance-required-to-start-lab-in-elastic-security-for-siem-on-demand/379578/3 "2025-07-03T23:34:03Z")

</div>

Hi @Tortoise ,

I don't see any mention of any flag on the course. Could you point our where exactly I can find them. I am assuming there is a challenge to solve before getting the flag, would that be correct?

Kind regards,

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [July 5, 2025, 2:18am UTC](https://discuss.elastic.co/t/assistance-required-to-start-lab-in-elastic-security-for-siem-on-demand/379578/4 "2025-07-05T02:18:04Z")

</div>

Hello @Mr.Estro

Welcome to the community!!

The flags related information is mentioned as below :

> Elastic Security for SIEM (On-Demand)  
> Module 1: Elastic Stack Overview  
> Access Your CTFd Instance: Demo  
> CTFd Flags  
> During different portions of the labs in this course, you will need the following flags to unlock challenge questions. You can write these down if you'd prefer, but you will be provided with the unlock flag each time you come to a lab.

Thanks!!
