Observability
Elastic Security: SIEM, detection rules and investigation
Use Elastic Security as a SIEM: ECS data sources, detection rule types (query, EQL, ES|QL, threshold, indicator match, machine learning), prebuilt rules, …
Guides & insights
Observability
Use Elastic Security as a SIEM: ECS data sources, detection rule types (query, EQL, ES|QL, threshold, indicator match, machine learning), prebuilt rules, …
Observability
Understand the problems detected by Davis, read a problem page (root cause, impact, timeline), configure alerting profiles and notifications, automate rem…
Observability
Search for traces, read a timeline, spot the critical path, compare two traces, use the dependency graph and Service Performance Monitoring (SPM).
Learning never stops