# Measuring reaction to detection

**URL:** <https://discuss.elastic.co/t/measuring-reaction-to-detection/268362>\
**Category:** Elastic Security\
**Created:** [March 25, 2021, 2:28pm UTC](https://discuss.elastic.co/t/measuring-reaction-to-detection/268362 "2021-03-25T14:28:25Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![austinsonger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/austinsonger/32/78994_2.png) [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Post date:** [March 28, 2021, 5:48pm UTC](https://discuss.elastic.co/t/measuring-reaction-to-detection/268362/3 "2021-03-28T17:48:17Z")

</div>

> [@Anna\_Foxx](#):
>
> I want to know whether there is a functionality in Elastic Security to monitor reaction time to detection for example to count SLA. Is there smth called internal index from which I can get fields that will show me when my detection has been created and closed? And after that to build a dashboard based on reaction speed
> 
> Btw, can I escalate an alert to another analyst? Or mark it as false positive. Unfortunately, I haven't found such buttons

So here is what I do for our clients when it comes to using Elastic SIEM and ensuring SLA:

- Use JIRA Service Desk and use their SLA feature
- Configure Elastic SIEM to create a ticket in JIRA automatically anytime a Detection is trigger in Elastic.
  - Here is the easy of bulk editing script all of the detection rules
    - [Elastic Security: Bulk Detection Rule Modification via Detection API - JIRA Connector](https://songer.pro/elastic-security-bulk-detection-rule-modification-via-detection-api-jira-connector/)
    - [GitHub - austinsonger/Elastic-Security: Repo for Automations and other solutions for Elastic SIEM/Security.](https://github.com/austinsonger/Elastic-Security-Tricks)

- So we basically subvert Elastic SIEM to JIRA for the initial detection and the following will show the information I have sent to JIRA:
  - [Elastic SIEM Connector to JIRA Service Desk Template #JIRA #Elastic · GitHub](https://gist.github.com/austinsonger/998b3d784eb5f9c040276ac7c4c9f5c2)

---

_[View the full topic](https://discuss.elastic.co/t/measuring-reaction-to-detection/268362)._