You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is there a way to include Elastic Security Alerts within the SOC dashboard? If I include the following query, I do not see any of the Elastic Detections in SOC. If I use that query within Kibana, I see the alerts.
_index: ".internal.alerts-security.alerts-default-*"
Thanks for any guidance here.
Guidelines
I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
Version
2.4.60
Installation Method
Security Onion ISO image
Description
configuration
Installation Type
Distributed
Location
airgap
Hardware Specs
Exceeds minimum requirements
CPU
4
RAM
32
Storage for /
1TB
Storage for /nsm
3TB
Network Traffic Collection
tap
Network Traffic Speeds
Less than 1Gbps
Status
Yes, all services on all nodes are running OK
Salt Status
No, there are no failures
Logs
No, there are no additional clues
Detail
Is there a way to include Elastic Security Alerts within the SOC dashboard? If I include the following query, I do not see any of the Elastic Detections in SOC. If I use that query within Kibana, I see the alerts.
_index: ".internal.alerts-security.alerts-default-*"
Thanks for any guidance here.
Guidelines
Beta Was this translation helpful? Give feedback.
All reactions