Elastic Security Analytics Examples
Security Analytics examples for DNS tunnel detection and SIEM-at-Home, including Packetbeat, Beats configs, Watcher logic, and setup notes.
Use this collection
What you can do with Security Analytics downloads
Security Analytics resources support security monitoring, detection engineering, alert triage, and investigation workflows for teams using Elastic Security and the Elastic Stack.
How should I use these examples?
Download the content, import it into your Elastic environment, review the saved objects or rules, and adapt the fields, filters, and visualizations to your own data.
Where should I go next?
Use the related collections below to move between dashboards, security content, observability examples, pipelines, Elasticsearch resources, and AI-assisted Elastic workflows.
Explore Elastic content
Start from a use case, solution area, or content type to find useful Elastic resources.
End-to-End Observability
Business Critical Service health across UX, CDN, origin, network, and platform—including async hops without a single shared trace.
Kubernetes Observability
Kubernetes monitoring, OpenTelemetry, SLO, EKS, and ECK resources for Elastic users.
Network Observability
Packetbeat, DNS analytics, network signals, and observability patterns for Elastic.
Telco industry
Telco-focused paths for network visibility, service reliability, Kubernetes, and security monitoring.
Kibana dashboards
Ready-to-use dashboard examples for visualizing Elasticsearch data.
Security Analytics examples
Elastic Graph Examples
Elastic Graph examples for Apache log security exploration and movie recommendations, including ingest pipelines, templates, data loaders, and walkthroughs.
Elastic Machine Learning Recipes
Elastic examples for ML anomaly detection and analytics across IT operations, security analytics, business metrics, getting started datasets, and notebooks.