Detection engine

[Liora]

Hi everyone,

how can i please enable the Detections feature in Kibana? Who is the user with the mentioned privileges?

Thank you

[thomasneirynck]

hi @Liora , I think these pages will get you started:

• Detections (beta) | SIEM Guide [7.8] | Elastic
• Detections (beta) | SIEM Guide [7.8] | Elastic

[Liora]

Thank you. How can i please create these indices and cluster privileges?

[thomasneirynck]

hi @Liora , this is outlined here Detections (beta) | SIEM Guide [7.8] | Elastic

You at least need an SSL-deployment. You can then set the appropriate priviliges in the Kibana spaces app. Spaces | Kibana Guide [7.8] | Elastic

[Liora]

Thank you @thomasneirynck . The problem is i'm running elastic stack on docker. The documentation you sent to me is either for elastic cloud or for self-managed deployments
Do you please have a solution for docker?

[Felix_Roessel]

This article desribes how to configure SSL comunication in dicker: Encrypting communications in an Elasticsearch Docker Container | Elasticsearch Reference [7.11] | Elastic