# Event Correlation Using ELK

**URL:** <https://discuss.elastic.co/t/event-correlation-using-elk/208768>\
**Category:** Elasticsearch\
**Created:** [November 20, 2019, 8:11pm UTC](https://discuss.elastic.co/t/event-correlation-using-elk/208768 "2019-11-20T20:11:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![AnshuPal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anshupal/32/53261_2.png) [@AnshuPal](https://discuss.elastic.co/u/AnshuPal)\
**Post date:** [November 20, 2019, 8:11pm UTC](https://discuss.elastic.co/t/event-correlation-using-elk/208768/1 "2019-11-20T20:11:20Z")

</div>

Hello,

I have installed and configured all the ELK stack and i am also able to capture all the logs.

Now i need to correlate the logs coming from different sources ex. Firewall, switches, Syslog and Operating sytems In order to identify which component is under attack or need attention.

Is there any plugin, component or configuration available that can help me to correlate the events.

for example : port scan identify, ping floods, syn floods etc.

any help would be appreciated.

Thanks  
Anshu

---

<div class="post-metadata">

**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Post date:** [November 21, 2019, 3:10am UTC](https://discuss.elastic.co/t/event-correlation-using-elk/208768/2 "2019-11-21T03:10:34Z")

</div>

Sounds like a tease for Elastic's [SIEM](https://www.elastic.co/products/siem?ultron=%5BEL%5D-%5BB%5D-%5BAMER%5D-US+CA-Exact&blade=adwords-s&Device=c&thor=elasticsearch%20siem&gclid=Cj0KCQiA5dPuBRCrARIsAJL7oeiNtD7Ps3oHqzmmn-DJ6W8jL0W3BOTIQ4QPy1k77eWj6YGPQojtjBUaAgRAEALw_wcB)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 19, 2019, 3:10am UTC](https://discuss.elastic.co/t/event-correlation-using-elk/208768/3 "2019-12-19T03:10:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.