Problem: data from filebeat appear in SIEM, but at detection the it just empty and show this notification
"Let’s set up your detection engine
To use the detection engine, a user with the required cluster and index privileges must first access this page. For more help, contact your administrator."
what should i do to setup detection?