From ea87ff94f033710e7549fcaa00b56816a4dece92 Mon Sep 17 00:00:00 2001 From: Janeen Mikell-Straughn <57149392+jmikell821@users.noreply.github.com> Date: Tue, 27 Oct 2020 10:52:57 -0400 Subject: [PATCH] Getting Started updates - 7.10 (#340) * added video to getting started and index update to advanced settings. * Slight change. --- docs/getting-started/advanced-setting.asciidoc | 7 ++++--- docs/getting-started/index.asciidoc | 2 ++ 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/docs/getting-started/advanced-setting.asciidoc b/docs/getting-started/advanced-setting.asciidoc index 6897a3ba3e..25508bbb05 100644 --- a/docs/getting-started/advanced-setting.asciidoc +++ b/docs/getting-started/advanced-setting.asciidoc @@ -51,15 +51,16 @@ NOTE: Index patterns use wildcards to specify a set of indices. For example, the `filebeat-*` index pattern means all indices starting with `filebeat-` are available in the {es-sec-app}. -All of the default index patterns match {beats-ref}/beats-reference.html[{beats}] and +All of the default index patterns match {beats-ref}/beats-reference.html[{beats}] and {ingest-guide}/ingest-management-overview.html[{agent}] indices. This means all data shipped via {beats} and the {agent} is automatically added to the {es-sec-app}. You can add or remove any indices and index patterns as required. For some background information on {es} indices, see -{ref}/documents-indices.html[Data in: documents and indices]. +{ref}/documents-indices.html[Data in: documents and indices]. +NOTE: If you leave the `logs-*` index selected, by default, all Elastic cloud logs are excluded from all queries in the {security-app}. This is to avoid adding data from cloud monitoring to the app. IMPORTANT: {es-sec} requires {ecs-ref}[ECS-compliant data]. If you use third-party data collectors to ship data to {es}, the data must be mapped to ECS. @@ -93,7 +94,7 @@ default values. == Set machine learning score threshold When security <> are enabled, this setting -determines the threshold above which anomaly scores are displayed in {es-sec}: +determines the threshold above which anomaly scores are displayed in {es-sec}: * `securitySolution:defaultAnomalyScore` diff --git a/docs/getting-started/index.asciidoc b/docs/getting-started/index.asciidoc index 002a2e8c0c..158200a236 100644 --- a/docs/getting-started/index.asciidoc +++ b/docs/getting-started/index.asciidoc @@ -4,6 +4,8 @@ Looking to get started with Elastic Security? This section describes the Elastic Security UI in Kibana, the system requirements required to run the Elastic Agent with the Elastic Endpoint Security integration, as well as instructions on how to configure and install Elastic Security on your host. +TIP: View the https://www.elastic.co/training/elastic-security-quick-start[Elastic Security Quick Start video] to learn how to configure your endpoints with Elastic Security so you can stream, detect, and visualize threats in real time on Elastic Cloud. + include::sec-app-requirements.asciidoc[leveloffset=+1] include::detections-req.asciidoc[leveloffset=+2] include::cases-req.asciidoc[leveloffset=+2]