# LLM tag retrieval

**URL:** <https://discuss.elastic.co/t/llm-tag-retrieval/359353>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-monitoring, elastic-stack-security, elastic-stack-alerting, language-clients\
**Created:** [May 13, 2024, 8:35am UTC](https://discuss.elastic.co/t/llm-tag-retrieval/359353 "2024-05-13T08:35:24Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![BILI](https://avatars.discourse-cdn.com/v4/letter/b/e9a140/32.png) [@BILI](https://discuss.elastic.co/u/BILI)\
**Post date:** [May 13, 2024, 8:35am UTC](https://discuss.elastic.co/t/llm-tag-retrieval/359353/1 "2024-05-13T08:35:24Z")

</div>

using LLM to anticipate in hackers attacks/ bottle necks /performance picks of monitored products.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 13, 2024, 10:07am UTC](https://discuss.elastic.co/t/llm-tag-retrieval/359353/2 "2024-05-13T10:07:05Z")

</div>

Welcome!

Is that a question?

---

<div class="post-metadata">

**Author:** ![BILI](https://avatars.discourse-cdn.com/v4/letter/b/e9a140/32.png) [@BILI](https://discuss.elastic.co/u/BILI)\
**Post date:** [May 13, 2024, 10:13am UTC](https://discuss.elastic.co/t/llm-tag-retrieval/359353/3 "2024-05-13T10:13:10Z")

</div>

No beats proposal

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 13, 2024, 10:39am UTC](https://discuss.elastic.co/t/llm-tag-retrieval/359353/4 "2024-05-13T10:39:16Z")

</div>

What is the question?

---

<div class="post-metadata">

**Author:** ![BILI](https://avatars.discourse-cdn.com/v4/letter/b/e9a140/32.png) [@BILI](https://discuss.elastic.co/u/BILI)\
**Post date:** [May 13, 2024, 10:50am UTC](https://discuss.elastic.co/t/llm-tag-retrieval/359353/5 "2024-05-13T10:50:05Z")

</div>

Is there any similar beat (llmxxxxxxx) - can i push a code (GO) to [beats/tools at main · elastic/beats · GitHub](https://github.com/elastic/beats/tree/main/tools) (create pull request) ???  
Is there any LLM that ELK have been used (or plan to use in the future) ???

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 13, 2024, 11:14am UTC](https://discuss.elastic.co/t/llm-tag-retrieval/359353/6 "2024-05-13T11:14:19Z")

</div>

What is the use case? What do you want to achieve?

---

<div class="post-metadata">

**Author:** ![BILI](https://avatars.discourse-cdn.com/v4/letter/b/e9a140/32.png) [@BILI](https://discuss.elastic.co/u/BILI)\
**Post date:** [May 13, 2024, 11:21am UTC](https://discuss.elastic.co/t/llm-tag-retrieval/359353/7 "2024-05-13T11:21:00Z")

</div>

> [@BILI](#):
>
> using LLM to anticipate in hackers attacks/ bottle necks /performance picks of monitored products.

using LLM to anticipate (automated) in hackers attacks/ bottle necks /performance picks of monitored products

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 13, 2024, 11:27am UTC](https://discuss.elastic.co/t/llm-tag-retrieval/359353/8 "2024-05-13T11:27:32Z")

</div>

So. Elastic provides an LLM integration to communicate with the security solution.  
Note that this requires a commercial license or a trial when running on premise.

Have a look at:

> **[AI Assistant | Elastic Security Solution \[8.13\] | Elastic](https://www.elastic.co/guide/en/security/current/security-assistant.html)**