# I configure elk with filebeat,elasticsearch,kibana, where do i can apply sigma rules? **URL:** \ **Category:** Elasticsearch\ **Created:** [May 26, 2020, 3:32pm UTC](https://discuss.elastic.co/t/i-configure-elk-with-filebeat-elasticsearch-kibana-where-do-i-can-apply-sigma-rules/234375 "2020-05-26T15:32:31Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![man](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@man](https://discuss.elastic.co/u/man)\ **Post date:** [May 26, 2020, 3:32pm UTC](https://discuss.elastic.co/t/i-configure-elk-with-filebeat-elasticsearch-kibana-where-do-i-can-apply-sigma-rules/234375/1 "2020-05-26T15:32:31Z")
filebeat ship all the logs to elasticsearch , in kibana i can able to see, but where can apply converted sigma rules? i am new to elk, please help. ---
**Author:** ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Post date:** [May 26, 2020, 11:17pm UTC](https://discuss.elastic.co/t/i-configure-elk-with-filebeat-elasticsearch-kibana-where-do-i-can-apply-sigma-rules/234375/2 "2020-05-26T23:17:59Z")
If you want to index individual fields you have basically 2 options: 1. Send your data trough filebeat in json format. 2. Send your data from filebeat to logstash and write filters for your data and send it to Elasticsearch There will be other methods but those are the most basic as the come. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 23, 2020, 11:18pm UTC](https://discuss.elastic.co/t/i-configure-elk-with-filebeat-elasticsearch-kibana-where-do-i-can-apply-sigma-rules/234375/3 "2020-06-23T23:18:03Z")
Closed on June 23, 2020, 11:18pm UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.