Introduction into Eland, a Python package to analyse, explore and manipulate Elasticsearch data. In this talk, Seth Larson introduces us to Eland. Eland is a Python Elasticsearch client for exploring and analyzing data residing in Elasticsearch with a familiar Pandas-compatible API.

Learn how to detect malicious events using both supervised and unsupervised machine learning techniques. See how to streamline the end-to-end experience of building and running machine learning jobs with the Elastic Stack.

The Logstash MaxMind filter enriches documents with GeoIP information from the open-source MaxMind database. But did you know that you can customize this filter to enrich documents with all kinds of other IP-related data? MaxMind uses its own database, which enables very fast searching based on IP address. Our experience is that this is the very best way to retrieve any type of IP-based information and store it upon ingestion without impacting performance.

Are you new to Elastic SIEM? Join us for a demo and learn how to start investigating threats in your environment.

Kibana is quite powerful and versatile for visualizing data in Elasticsearch. The Elastic Stack can be used for a variety of use cases. One is the detection of frauds e.g. in Banking transaction like within Softbank Payment Service or bonus point accounts like within Miles and More. Other areas are insurance or tax return data.

Calling all security enthusiasts! Many of us are now facing similar challenges working from home. Introduced in 7.2, Elastic SIEM is a great way to provide security analytics and monitoring capabilities to small businesses and homes with limited time and resources. In this three part meetup series we will take you on a journey from zero to hero - getting started with the Elastic SIEM to beginner threat hunting.

Elastic Observability 7.8 includes new Google Cloud integrations, TLS / SSL certificate monitoring, and health indicators in APM service maps.

Learn how APM lets you monitor the performance of applications deployed anywhere within your network. Now you can use APM data to hunt for threats and injection attacks, too. Elastic provides a common data platform so you can view HTTP data collected with your APM agents in the Elastic SIEM app. It’s seamless monitoring and protection to keep your systems up, running, and secure.

In this virtual meetup, we are going to show how we can index the data regarding COVID-19 in Sweden into Elasticsearch, and visualize them in Kibana, and make your own dashboard.

Setting up and running an Elasticsearch cluster is easy at first, but some planning and design can help preventing many issues when going live gets real and your cluster needs to scale up. Cris da Rocha from the support team at Elastic will present some tips and tricks, learned from the experience of Elastic Support on how to do things better.