Skip to content

Commit 6dcf8a1

Browse files
authored
Add siem gde files and placeholder 7.x (#356)
* Add files for siem gde * Remove starter files for secops
1 parent d96fd41 commit 6dcf8a1

File tree

9 files changed

+75
-53
lines changed

9 files changed

+75
-53
lines changed
-27 KB
Binary file not shown.

docs/en/secops/index.asciidoc

Lines changed: 0 additions & 17 deletions
This file was deleted.

docs/en/secops/overview.asciidoc

Lines changed: 0 additions & 20 deletions
This file was deleted.

docs/en/secops/sec-ui.asciidoc

Lines changed: 0 additions & 14 deletions
This file was deleted.
37.4 KB
Loading

docs/en/siem/index.asciidoc

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
:doctype: book
2+
:siem-soln-cap: SIEM Monitoring
3+
:siem-soln: SIEM monitoring
4+
:siem-ui: SIEM UI
5+
6+
= SIEM Solution Guide
7+
8+
//include::{asciidoc-dir}/../../shared/versions.asciidoc[]
9+
10+
include::{asciidoc-dir}/../../shared/attributes.asciidoc[]
11+
12+
include::overview.asciidoc[]
13+
14+
//include::installation.asciidoc[]
15+
16+
//include::siem-ui.asciidoc[]
17+

docs/en/secops/installation.asciidoc renamed to docs/en/siem/installation.asciidoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
[[install-sec-monitoring]]
1+
[[install-siem]]
22
[role="xpack"]
33
== Get up and running
44

@@ -27,7 +27,7 @@ such as the index pattern used to query the data, and the timestamp field used
2727
for sorting. For more information, see {kib}.
2828

2929
[float]
30-
[[install-beats-for-sec]]
30+
[[install-beats]]
3131
=== Install {beats} shippers
3232

3333
To populate the security UI with metrics and

docs/en/siem/overview.asciidoc

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
[[siem-overview]]
2+
//[role="xpack"]
3+
//== Overview
4+
5+
6+
== Coming soon
7+
8+
Won't be long now!
9+
10+
////
11+
beta[]
12+
13+
{siem-soln-cap} gives you a comprehensive view into your security operations,
14+
and helps make those insights actionable.
15+
16+
The UI in {kib} brings together data from a variety of sources, making it easier
17+
for you to identify and resolve security issues.
18+
19+
[float]
20+
[[siem-components]]
21+
=== SIEM monitoring components
22+
23+
Security monitoring requires the following {stack} components.
24+
25+
image::images/siem-architecture.png[]
26+
27+
*https://www.elastic.co/products/beats[{beats}]* are open source data
28+
shippers that you install as agents on your servers to send operational data to
29+
{es}.
30+
31+
*https://www.elastic.co/products/elasticsearch[{es}]* is a real-time,
32+
distributed storage, search, and analytics engine. {es} excels is indexing
33+
streams of semi-structured data, such as logs or metrics.
34+
35+
*https://www.elastic.co/products/kibana[{kib}]* is an open source analytics and
36+
visualization platform designed to work with {es}. You use {kib} to search,
37+
view, and interact with data stored in {es} indices. You can easily perform
38+
advanced data analysis and visualize your data in a variety of charts, tables,
39+
and maps.
40+
41+
{kib} {siem-ui} provides a dedicated user interface for visualizing host security.
42+
////

docs/en/siem/siem-ui.asciidoc

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
[[siem-ui-overview]]
2+
[role="xpack"]
3+
== SIEM UI
4+
5+
beta[]
6+
7+
After you have security monitoring <<install-siem,up and
8+
running>> and data is streaming to {es}, use the {siem-ui} in {kib} to monitor
9+
and identify security problems in real time.
10+
11+
For more information about working with the {siem-ui}, see the
12+
{kib} documentation.
13+
14+

0 commit comments

Comments
 (0)