You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/getting-started/advanced-setting.asciidoc
+4-3Lines changed: 4 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -51,15 +51,16 @@ NOTE: Index patterns use wildcards to specify a set of indices. For example, the
51
51
`filebeat-*` index pattern means all indices starting with `filebeat-` are
52
52
available in the {es-sec-app}.
53
53
54
-
All of the default index patterns match {beats-ref}/beats-reference.html[{beats}] and
54
+
All of the default index patterns match {beats-ref}/beats-reference.html[{beats}] and
55
55
{ingest-guide}/ingest-management-overview.html[{agent}] indices. This means all
56
56
data shipped via {beats} and the {agent} is automatically added to the
57
57
{es-sec-app}.
58
58
59
59
You can add or remove any indices and index patterns as required. For some
60
60
background information on {es} indices, see
61
-
{ref}/documents-indices.html[Data in: documents and indices].
61
+
{ref}/documents-indices.html[Data in: documents and indices].
62
62
63
+
NOTE: If you leave the `logs-*` index selected, by default, all Elastic cloud logs are excluded from all queries in the {security-app}. This is to avoid adding data from cloud monitoring to the app.
63
64
64
65
IMPORTANT: {es-sec} requires {ecs-ref}[ECS-compliant data]. If you use third-party data
65
66
collectors to ship data to {es}, the data must be mapped to ECS.
@@ -93,7 +94,7 @@ default values.
93
94
== Set machine learning score threshold
94
95
95
96
When security <<machine-learning, {ml} jobs>> are enabled, this setting
96
-
determines the threshold above which anomaly scores are displayed in {es-sec}:
97
+
determines the threshold above which anomaly scores are displayed in {es-sec}:
Copy file name to clipboardExpand all lines: docs/getting-started/index.asciidoc
+2Lines changed: 2 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,6 +4,8 @@
4
4
5
5
Looking to get started with Elastic Security? This section describes the Elastic Security UI in Kibana, the system requirements required to run the Elastic Agent with the Elastic Endpoint Security integration, as well as instructions on how to configure and install Elastic Security on your host.
6
6
7
+
TIP: View the https://www.elastic.co/training/elastic-security-quick-start[Elastic Security Quick Start video] to learn how to configure your endpoints with Elastic Security so you can stream, detect, and visualize threats in real time on Elastic Cloud.
0 commit comments