# Event Correlation

**URL:** <https://discuss.elastic.co/t/event-correlation/259144>\
**Category:** Elasticsearch\
**Created:** [December 19, 2020, 12:08am UTC](https://discuss.elastic.co/t/event-correlation/259144 "2020-12-19T00:08:06Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![escrimaglia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/escrimaglia/32/81136_2.png) [@escrimaglia](https://discuss.elastic.co/u/escrimaglia)\
**Post date:** [December 19, 2020, 12:08am UTC](https://discuss.elastic.co/t/event-correlation/259144/1 "2020-12-19T00:08:07Z")

</div>

Hi,

I’m testing ELK. So far it’s been very well sending logs from different platforms to elastic as well as indexing and creating views or graphs. My interest now is correlate event using all those logs entries. For example:

- because I received so many interfaces resets, I would like elastic to tell me that there is an issue on that router.
- or any security issue
- or any custom rule: if an user is login in many different devices in a short period, then that user is doing some thing out of plan.

Wondering if there is some tool or module like this in elastic.

Thank you vary much

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 29, 2020, 8:33pm UTC](https://discuss.elastic.co/t/event-correlation/259144/2 "2020-12-29T20:33:35Z")

</div>

Welcome to our community! 😃

You can run pattern analysis via the ML functionality, and there is the free SIEM that will help on the security front.

---

<div class="post-metadata">

**Author:** ![escrimaglia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/escrimaglia/32/81136_2.png) [@escrimaglia](https://discuss.elastic.co/u/escrimaglia)\
**Post date:** [December 29, 2020, 9:12pm UTC](https://discuss.elastic.co/t/event-correlation/259144/3 "2020-12-29T21:12:23Z")

</div>

Thanks for your replay!!

what is ML functionality?. Besides, can you help me with some some info or documentation on Running pattern analysis?

br and thanks again

Ed

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 29, 2020, 9:17pm UTC](https://discuss.elastic.co/t/event-correlation/259144/4 "2020-12-29T21:17:09Z")

</div>

Check out [https://www.elastic.co/elastic-stack/features#inference](https://www.elastic.co/elastic-stack/features#inference) and the sections below it.

The ML docs are here - [https://www.elastic.co/guide/en/machine-learning/current/index.html](https://www.elastic.co/guide/en/machine-learning/current/index.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 26, 2021, 9:17pm UTC](https://discuss.elastic.co/t/event-correlation/259144/5 "2021-01-26T21:17:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.