# Reference architecture for running Elastic SIEM on Kubernetes

**URL:** <https://discuss.elastic.co/t/reference-architecture-for-running-elastic-siem-on-kubernetes/360693>\
**Category:** Elastic Security\
**Tags:** docker\
**Created:** [June 3, 2024, 7:44am UTC](https://discuss.elastic.co/t/reference-architecture-for-running-elastic-siem-on-kubernetes/360693 "2024-06-03T07:44:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![srini\_dk](https://avatars.discourse-cdn.com/v4/letter/s/49beb7/32.png) [@srini\_dk](https://discuss.elastic.co/u/srini_dk)\
**Post date:** [June 3, 2024, 7:44am UTC](https://discuss.elastic.co/t/reference-architecture-for-running-elastic-siem-on-kubernetes/360693/1 "2024-06-03T07:44:11Z")

</div>

Hi Team,

Do we have any reference architecture for running Elastic SIEM on Kubernetes, on AWS or Azure? What services do we need to consider in terms of services, sizing, and network, and what pods should we include?

Regards,  
Srini

---

<div class="post-metadata">

**Author:** ![wsouza](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wsouza/32/92547_2.png) [@wsouza](https://discuss.elastic.co/u/wsouza)\
**Post date:** [June 3, 2024, 10:28pm UTC](https://discuss.elastic.co/t/reference-architecture-for-running-elastic-siem-on-kubernetes/360693/2 "2024-06-03T22:28:09Z")

</div>

The link below contains hardware specifications for an Elastic Security - SIEM installation:

> **[Hardware prerequisites | Elastic Cloud Enterprise Reference \[3.7\] | Elastic](https://www.elastic.co/guide/en/cloud-enterprise/current/ece-hardware-prereq.html)**

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 1, 2024, 10:28pm UTC](https://discuss.elastic.co/t/reference-architecture-for-running-elastic-siem-on-kubernetes/360693/3 "2024-07-01T22:28:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
