Skip to content

Commit 0376adc

Browse files
Add ESQL for security section, threat hunt tutorial (#1689)
Co-authored-by: natasha-moore-elastic <[email protected]>
1 parent e4f9375 commit 0376adc

File tree

3 files changed

+595
-0
lines changed

3 files changed

+595
-0
lines changed
Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
---
2+
navigation_title: ES|QL for security
3+
applies_to:
4+
stack: all
5+
serverless:
6+
products:
7+
- id: security
8+
---
9+
10+
# {{esql}} for security use cases
11+
12+
Use the following resources to learn about using the [Elasticsearch Query Language ({{esql}})](elasticsearch://reference/query-languages/esql.md) for cybersecurity use cases.
13+
14+
## Tutorials
15+
16+
- [Threat hunting with {{esql}}](esql-for-security/esql-threat-hunting-tutorial.md): Learn how to use {{esql}} to hunt for threats in your data.
17+
18+
## Documentation
19+
20+
Learn how to:
21+
22+
- [Generate and understand {{esql}} queries](/solutions/security/ai/generate-customize-learn-about-esorql-queries.md) using the AI Assistant
23+
- [Investigate events in Timeline](/solutions/security/investigate/timeline.md#esql-in-timeline) using {{esql}}
24+
- [Create detection rules](/solutions/security/detect-and-alert/create-detection-rule.md#create-esql-rule) using {{esql}}
25+
- [Convert Splunk SPL rules to {{esql}}](/solutions/security/get-started/automatic-migration.md) with Automatic Migration

0 commit comments

Comments
 (0)