Failing to get Detection Alerts

Elastic Security SIEM
1

Hi All,

I am getting below error while checking detection alerts.

An error occurred during rule execution: message: "security_exception" name: "iRule-testing2" id: "" rule id: "" signals index: ".siem-signals-security_analyst"

This issue occurs when I increase the Schedule interval time from 10 minutes to 30 minutes. Please Help.

2

Can you open the dev console in the browser and try and find the "more complete" error?
Have you looked into your kibana/ES logs to see if you have any related errors?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.