# Which version of kibana supports siem?

**URL:** <https://discuss.elastic.co/t/which-version-of-kibana-supports-siem/213312>\
**Category:** Kibana\
**Created:** [December 30, 2019, 7:06am UTC](https://discuss.elastic.co/t/which-version-of-kibana-supports-siem/213312 "2019-12-30T07:06:06Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![irobot678](https://avatars.discourse-cdn.com/v4/letter/i/54ee81/32.png) [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Post date:** [December 30, 2019, 7:06am UTC](https://discuss.elastic.co/t/which-version-of-kibana-supports-siem/213312/1 "2019-12-30T07:06:06Z")

</div>

Hi,

I'm using elastic stack 7.1.1 with x-pack installed and i want to enable siem but cant see the siem section in kibana .

so, please let me know which version of elastic stack supports siem ?

---

<div class="post-metadata">

**Author:** ![sholzhauer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sholzhauer/32/110282_2.png) [@sholzhauer](https://discuss.elastic.co/u/sholzhauer)\
**Post date:** [December 30, 2019, 8:38am UTC](https://discuss.elastic.co/t/which-version-of-kibana-supports-siem/213312/2 "2019-12-30T08:38:51Z")

</div>

You will need version 7.4 or above

Keep in mind to get the most out of this you will need your beats to be up to 7.4 too and using the ECS.

---

<div class="post-metadata">

**Author:** ![irobot678](https://avatars.discourse-cdn.com/v4/letter/i/54ee81/32.png) [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Post date:** [December 30, 2019, 2:43pm UTC](https://discuss.elastic.co/t/which-version-of-kibana-supports-siem/213312/3 "2019-12-30T14:43:57Z")

</div>

i have installed Elastic stack of 7.5.1 without x-pack but i am getting the following error while running auditbeat ?

```
2019-12-30T20:09:35.379+0530	ERROR	instance/beat.go:916	Exiting: 2 errors: 1 error: failed to create audit client: failed to get audit status: operation not permitted; 1 error: unable to create DNS sniffer: failed creating af_packet sniffer: operation not permitted
Exiting: 2 errors: 1 error: failed to create audit client: failed to get audit status: operation not permitted; 1 error: unable to create DNS sniffer: failed creating af_packet sniffer: operation not permitted

```

Please help me solve it.

---

<div class="post-metadata">

**Author:** ![wylie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wylie/32/81794_2.png) [@wylie](https://discuss.elastic.co/u/wylie)\
**Post date:** [December 30, 2019, 3:08pm UTC](https://discuss.elastic.co/t/which-version-of-kibana-supports-siem/213312/4 "2019-12-30T15:08:19Z")

</div>

Auditbeat is FOSS, and if you have setup questions for that you should try the Beats subforum: [https://discuss.elastic.co/c/beats/7](https://discuss.elastic.co/c/beats/7)

The SIEM app in Kibana is Basic licensed: [https://www.elastic.co/subscriptions](https://www.elastic.co/subscriptions)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 27, 2020, 3:15pm UTC](https://discuss.elastic.co/t/which-version-of-kibana-supports-siem/213312/5 "2020-01-27T15:15:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.