|
Using security analytics is hard mostly because of a lack of documentation
|
|
40
|
2871
|
July 23, 2024
|
|
Trouble with mappings, detectors, and alerts
|
|
21
|
1480
|
August 21, 2025
|
|
Security Analytics Error
|
|
13
|
1663
|
September 8, 2023
|
|
Detector with Linux System Logs Type does not detect its rule
|
|
11
|
320
|
July 31, 2024
|
|
Help create a detector
|
|
15
|
89
|
June 8, 2026
|
|
User feedback on security analytics updates
|
|
0
|
594
|
August 18, 2023
|
|
Mapping API / index pattern
|
|
8
|
1164
|
April 5, 2023
|
|
Cannot delete detectors
|
|
7
|
1110
|
June 1, 2023
|
|
Security Analytics error when using Datastreams
|
|
7
|
1023
|
September 29, 2024
|
|
What shippers should I use to collect the logs so that SIGMA rules will start matching?
|
|
4
|
1045
|
August 18, 2023
|
|
Detector fields mapping issues for OpenSearch v2.5
|
|
3
|
1095
|
November 6, 2023
|
|
Failed to create query: Inconsistency of field data structures across documents for field
|
|
4
|
961
|
May 10, 2023
|
|
"null cannot be cast to non-null type" creating a detector
|
|
7
|
683
|
October 9, 2024
|
|
How to find track_total_hits value for a specific point_in_time (pit_id)?
|
|
2
|
1054
|
September 21, 2023
|
|
What log sources do you need for Security Analytics
|
|
4
|
791
|
April 21, 2023
|
|
Customizing Alert Security Analytics
|
|
6
|
667
|
October 27, 2023
|
|
Exception creating detector
|
|
5
|
680
|
March 27, 2023
|
|
How to make security Analytics Rule Detection
|
|
3
|
794
|
June 13, 2023
|
|
Failed to start Document-level-monitor: Inconsistency of field data structures across documents for field
|
|
3
|
754
|
March 29, 2023
|
|
Issue with Scheduled job for detectors
|
|
4
|
531
|
June 2, 2023
|
|
Security Analytics not working for Cross-cluster search
|
|
4
|
527
|
October 25, 2023
|
|
DNS SAP monitor throws error on create
|
|
7
|
392
|
May 8, 2023
|
|
Mappings in Security Analytics Plugin
|
|
2
|
628
|
March 16, 2023
|
|
Error creating custom rules through the Rule API
|
|
1
|
757
|
November 10, 2023
|
|
[OpenSearch] Multi-tenancy support in security analytics detector
|
|
2
|
600
|
February 27, 2023
|
|
Is there a new Mapping for Windows Logs in v2.9 breaking ECS?
|
|
2
|
594
|
September 1, 2023
|
|
Winlogbeat + security module analytics: data growup
|
|
1
|
691
|
June 20, 2023
|
|
Detectors in Security Analytics Plugin
|
|
4
|
437
|
April 5, 2023
|
|
Define OR instead of AND
|
|
3
|
443
|
May 31, 2024
|
|
Security analytics - not able create detector
|
|
2
|
426
|
May 11, 2024
|
|
Create detectors on datastream
|
|
3
|
308
|
December 16, 2023
|
|
Security Analytics Receive Alerts from Alerting Plugin
|
|
2
|
335
|
May 4, 2023
|
|
Can't view any alerts or findings ( Security Analytics )
|
|
0
|
100
|
August 7, 2024
|
|
Security Analytics for DNS logs
|
|
0
|
525
|
July 12, 2023
|
|
Security Analytics - doesn't work, no rules
|
|
1
|
349
|
April 20, 2024
|
|
How to schedule correlation rules?
|
|
0
|
486
|
May 10, 2023
|
|
Monitor can't process index [filebeat] due to field mapping limit
|
|
1
|
338
|
March 1, 2023
|
|
Security Analytics only alerting at 12am UTC
|
|
4
|
210
|
June 4, 2024
|
|
Detectors with custom rules are not producing any findings or alerts
|
|
0
|
463
|
March 30, 2023
|
|
Security Analytics detector not consistently generating Findings
|
|
0
|
429
|
September 12, 2023
|
|
Using Anomaly Detection Plugin to Identify External IP Log Entries
|
|
5
|
157
|
July 26, 2024
|
|
Importing Sigma Rule results into Error Message
|
|
0
|
384
|
December 1, 2022
|
|
Security Analytics detector not consistently generating Findings
|
|
0
|
364
|
September 13, 2023
|
|
Unable to get alert - getting Error and Deleted state
|
|
0
|
363
|
March 1, 2024
|
|
Cannot able to call localhost webhook via notification channels
|
|
7
|
125
|
November 3, 2025
|
|
Has anyone ever created a detector based on a custom log type?
|
|
0
|
349
|
April 3, 2024
|
|
Best practices for daily-roated-indexes
|
|
2
|
196
|
February 26, 2025
|
|
Need help for create Opensearch correlation rule for detect brute force attack
|
|
2
|
194
|
March 31, 2025
|
|
[security_analytics_exception] class java.lang.String cannot be cast to class java.util.Map (java.lang.String and java.util.Map are in module java.base of loader 'bootstrap')
|
|
0
|
325
|
April 16, 2024
|
|
Issues with Security Analytics and indexes/shards
|
|
0
|
316
|
October 17, 2023
|