# Is SIEM still free as Elastic Security? I cant seem to find the download for it. Anyone?

**URL:** <https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112>\
**Category:** Elastic Security\
**Created:** [June 28, 2023, 4:26pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112 "2023-06-28T16:26:51Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![gabe-elastic](https://avatars.discourse-cdn.com/v4/letter/g/a8b319/32.png) [@gabe-elastic](https://discuss.elastic.co/u/gabe-elastic)\
**Post date:** [June 28, 2023, 4:26pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112/1 "2023-06-28T16:26:51Z")

</div>

Is SIEM still free as Elastic Security? I cant seem to find the download for it. Anyone?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 28, 2023, 4:50pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112/2 "2023-06-28T16:50:49Z")

</div>

> [@gabe-elastic](#):
>
> Is SIEM still free as Elastic Security?

Some features are available with the Basic License.

> [@gabe-elastic](#):
>
> I cant seem to find the download for it. Anyone?

It is not clear, what do you want to download?

The SIEM features are part of Kibana, you need to download Kibana.

---

<div class="post-metadata">

**Author:** ![gabe-elastic](https://avatars.discourse-cdn.com/v4/letter/g/a8b319/32.png) [@gabe-elastic](https://discuss.elastic.co/u/gabe-elastic)\
**Post date:** [June 28, 2023, 6:10pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112/3 "2023-06-28T18:10:08Z")

</div>

Its confusing because elastic talks about a SIEM that is an add-on to Kibana, also that its a SAS version that's paid for. IN the article is seems that the SIEM add-on can be downloaded and added to one's non-cloud version. It essentially prewrites queries (I think). Check out this article if you get a hot second. Thank you folks

I think it's a paid function thats SAS driven and ingests NETFLOW.

---

<div class="post-metadata">

**Author:** ![gabe-elastic](https://avatars.discourse-cdn.com/v4/letter/g/a8b319/32.png) [@gabe-elastic](https://discuss.elastic.co/u/gabe-elastic)\
**Post date:** [June 28, 2023, 6:13pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112/4 "2023-06-28T18:13:51Z")

</div>

Couldnt upload link. :-\

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 28, 2023, 6:39pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112/5 "2023-06-28T18:39:48Z")

</div>

> [@gabe-elastic](#):
>
> Its confusing because elastic talks about a SIEM that is an add-on to Kibana, also that its a SAS version that's paid for. IN the article is seems that the SIEM add-on can be downloaded and added to one's non-cloud version.

It is not clear what you are referencing to.

SIEM is part of Kibana, some features of the SIEM app in Kibana are available with the Basic license.

If you are running Elasticsearch and Kibana on-premises, on your own hardware, the SIEM will also be present.

There is no major difference in features between the SaaS offering and the on-premises offering.

---

<div class="post-metadata">

**Author:** ![gabe-elastic](https://avatars.discourse-cdn.com/v4/letter/g/a8b319/32.png) [@gabe-elastic](https://discuss.elastic.co/u/gabe-elastic)\
**Post date:** [June 28, 2023, 7:57pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112/6 "2023-06-28T19:57:56Z")

</div>

Thank you Leandrojmp. That is very helpful. Will proceed with my on-prem setup

---

<div class="post-metadata">

**Author:** ![wsouza](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wsouza/32/92547_2.png) [@wsouza](https://discuss.elastic.co/u/wsouza)\
**Post date:** [June 30, 2023, 1:39pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112/7 "2023-06-30T13:39:52Z")

</div>

> [@gabe-elastic](#):
>
> Is SIEM still free as Elastic Security? I cant seem to find the download for it. Anyone?

Elastic Security is a combination of security solutions involving SIEM, Endpoint Protection, and Cloud Protection. SIEM features are free as well as some other functionality.

To use SIEM, you need the stack components: Kibana, Elasticsearch + Beats collectors. If you want to use Elastic Agent, you will need to configure a Fleet Server.

If a link from an Elastic Security project already containerized with Kibana, Elasticsearch, and Fleet Server:

> **[The Elastic Container Project for Security Research — Elastic Security Labs](https://www.elastic.co/pt/security-labs/the-elastic-container-project)**
>
> The Elastic Container Project provides a single shell script that will allow you to stand up and manage an entire Elastic Stack using Docker. This open source project enables rapid deployment for testing use cases.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 28, 2023, 1:40pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112/8 "2023-07-28T13:40:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
