SIEM ECS descriptions taking huge amount of unneccesary space in SIEM

willemdh · September 25, 2019, 7:17am

Hello,

Just some constructive feedback. When data is added to a SIEM timeline and the results are analyzed, it seems every field has a description column, which imho takes a huge amount of space, which could be used for more interesting things.. Maybe the ECS field description could only be shown when hovering over a little information icon instead of being shown by default for every field?

Grtz

Willem

tudor · September 27, 2019, 10:27am

Thanks for the feedback. Please keep it coming!

system · October 25, 2019, 10:28am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
What field are used to populate the entire SIEM APP SIEM ecs-elastic-common-schema	3	944	December 31, 2019
ECS fields for E-Commerce Elasticsearch ecs-elastic-common-schema	2	453	February 3, 2022
Mapping CPE IDs to ECS? Elasticsearch ecs-elastic-common-schema	3	905	January 2, 2020
Lots of unmapped fields in .siem-signals-default SIEM	4	1055	May 22, 2020
Timeline result of events not showing SIEM	9	1365	June 24, 2021

SIEM ECS descriptions taking huge amount of unneccesary space in SIEM

Related topics