mirror of
https://github.com/elastic/kibana.git
synced 2025-04-23 01:13:23 -04:00
Co-authored-by: Ben Skelker <54019610+benskelker@users.noreply.github.com>
This commit is contained in:
parent
ac3e802d3a
commit
505941e475
3 changed files with 5 additions and 5 deletions
|
@ -230,7 +230,7 @@ might increase the search time. This setting is off by default. Users must opt-i
|
|||
`siem:defaultAnomalyScore`:: The threshold above which Machine Learning job anomalies are displayed in the SIEM app.
|
||||
`siem:defaultIndex`:: A comma-delimited list of Elasticsearch indices from which the SIEM app collects events.
|
||||
`siem:ipReputationLinks`:: A JSON array containing links for verifying the reputation of an IP address. The links are displayed on
|
||||
{siem-guide}/siem-ui-overview.html#network-ui[IP detail] pages.
|
||||
{security-guide}/siem-ui-overview.html#network-ui[IP detail] pages.
|
||||
`siem:enableNewsFeed`:: Enables the security news feed on the SIEM *Overview*
|
||||
page.
|
||||
`siem:newsFeedUrl`:: The URL from which the security news feed content is
|
||||
|
|
|
@ -19,7 +19,7 @@ image::siem/images/overview-ui.png[SIEM Overview in Kibana]
|
|||
== Add data
|
||||
|
||||
Kibana provides step-by-step instructions to help you add data. The
|
||||
{siem-guide}[SIEM Guide] is a good source for more
|
||||
{security-guide}[Security Guide] is a good source for more
|
||||
detailed information and instructions.
|
||||
|
||||
[float]
|
||||
|
|
|
@ -43,7 +43,7 @@ for creating signals. The SIEM app comes with prebuilt rules that search for
|
|||
suspicious activity on your network and hosts. Additionally, you can
|
||||
create your own rules.
|
||||
|
||||
See {siem-guide}/detection-engine-overview.html[Detections] in the SIEM
|
||||
See {security-guide}/detection-engine-overview.html[Detections] in the SIEM
|
||||
Guide for information on managing detection rules and signals via the UI
|
||||
or the Detections API.
|
||||
|
||||
|
@ -61,7 +61,7 @@ saved Timelines. Additionally, you can send cases to external systems from
|
|||
within SIEM (currently ServiceNow and Jira).
|
||||
|
||||
For information about opening, updating, and closing cases, see
|
||||
{siem-guide}/cases-overview.html[Cases] in the SIEM Guide.
|
||||
{security-guide}/cases-overview.html[Cases] in the SIEM Guide.
|
||||
|
||||
[role="screenshot"]
|
||||
image::siem/images/cases-ui.png[]
|
||||
|
@ -82,7 +82,7 @@ Hosts and Network pages, or even from within Timeline itself.
|
|||
A timeline is responsive and persists as you move through the SIEM app
|
||||
collecting data.
|
||||
|
||||
See the {siem-guide}[SIEM Guide] for more details on data sources and an
|
||||
See the {security-guide}[Security Guide] for more details on data sources and an
|
||||
overview of UI elements and capabilities.
|
||||
|
||||
[float]
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue