The SIEM app is now a part of the Elastic Security solution. Click here to view SIEM documentation for previous releases.
« Windows Script Executing PowerShell Investigating events in Timeline »
Elastic Docs ›Elastic Security Solution [7.9]

Investigate events

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Investigate events

edit
This sections describes how to use timelines and the timeline graphical interface to investigate events.
« Windows Script Executing PowerShell Investigating events in Timeline »