# Orchestrate Elastic SIEM for training labs **URL:** \ **Category:** SIEM\ **Tags:** docker\ **Created:** [February 19, 2024, 2:24pm UTC](https://discuss.elastic.co/t/orchestrate-elastic-siem-for-training-labs/353607 "2024-02-19T14:24:58Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![lastshadow](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lastshadow/32/130040_2.png) [@lastshadow](https://discuss.elastic.co/u/lastshadow)\ **Post date:** [February 19, 2024, 2:24pm UTC](https://discuss.elastic.co/t/orchestrate-elastic-siem-for-training-labs/353607/1 "2024-02-19T14:24:58Z")
I have a cybersecurity training program that I teach. Currently I teach it live and I use Elastic SIEM. I think it is a great product and not just because of the cost. I deploy Elastic on docker and have it running for the duration of the class which is about 3 months. I will like to setup on-demand labs that students can start and be able to access the SIEM to investigate specific events in the SIEM. I wonder if there is a way to orchestrate this so that they get a very light version that only includes the specific events and does not require the usual amount of system resources. I understand that as part of the flow the log source will have to generate the actual events and send them to Elastic. My goal is to create light, on-demand, automated, scalable, and cloud-based labs. Is something like this even possible and if so how would you go about it? FYI i do not mind hiring a freelancer (limited budget) if i can find one with the required skills. Appreciate the help! ---
**Author:** ![lastshadow](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lastshadow/32/130040_2.png) [@lastshadow](https://discuss.elastic.co/u/lastshadow)\ **Post date:** [February 23, 2024, 1:36pm UTC](https://discuss.elastic.co/t/orchestrate-elastic-siem-for-training-labs/353607/2 "2024-02-23T13:36:17Z")
Bumping this! ---
**Author:** ![Colin2](https://avatars.discourse-cdn.com/v4/letter/c/ba9def/32.png) [@Colin2](https://discuss.elastic.co/u/Colin2)\ **Post date:** [February 28, 2024, 6:22pm UTC](https://discuss.elastic.co/t/orchestrate-elastic-siem-for-training-labs/353607/3 "2024-02-28T18:22:28Z")
Hi, If you are still on the lookout to hire someone, I would be glad to help you out as I am an experienced Elastic consultant You can reach out to me on my [email here](mailto:colinwilliams8254@gmail.com) Colin ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 27, 2024, 6:22pm UTC](https://discuss.elastic.co/t/orchestrate-elastic-siem-for-training-labs/353607/4 "2024-03-27T18:22:59Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.