Hi All, I have been trying to architect how I could use the Elastic SIEM in a MSSP environment where multiple clients would have a collector ( logstash, Filebeat ), and these would forward the logs to my main ELK stack. I have been trying to use different index per "client". however; I am having d…

Elastic SIEM for MSSP

Gilles_Villeneuve (Gilles Villeneuve) June 11, 2020, 1:20am 7

Hi Frankm

Awesome, thanks for the clarification and the input.

I will definitely try it and post here the results.

Thank you very much.

Topic		Replies	Views
Elastic Entreprise SIEM question SIEM	3	498	September 1, 2021
ELK Stack filebeat config for multiple clients Beats filebeat	2	237	November 30, 2022
Is it reasonable to use multiple instances of Filebeat (Windows) on a production system? Beats filebeat	5	816	October 28, 2020
Seperate filebeats for different groups of servers Elasticsearch elastic-stack-security	5	584	August 28, 2020
Multiple Different Clients SIEM	5	1972	February 1, 2021