Elastic Stack 7.2 controls security information and event management (SIEM)

In addition to SIEM, the latest release of Elastic features a locally installable version of the App Search service and improvements in observability.

Elastic Stack 7.2 controls security information and event management (SIEM)
Elastic Stack 7.2 controls security information and event management (SIEM)

After Elastic released the essential security features of the Elastic Stack for free at the end of May, the next step follows. With the release of Elastic Stack 7.2, the company continues to expand its security offering, providing complete security information and event management (SIEM). In addition to the well-known data collectors such as Auditbeat or Winlogbeat, the format ECS (Elastic Common Schema) introduced at the beginning of the year should help to be able to analyze data across all sources.

Programming Language Julia, an alternative to Python, R and Matlab

Elastic SIEM is designed as an interactive workspace that allows security teams to analyze events and conduct initial investigations. Kibana’s built-in SIEM app bundles a timeline event viewer with host and network security event analysis, allowing Security Operations Center (SOC) to leverage typical workflows to find potential threats and impending problems. As part of Elastic Stack 7.2, Elastic SIEM is available as beta for free.

n Kibana integrated Elastic SIEM App for Security Information and Event Management. (Image: Elastic)

An on-premises installable version of the Elastic App Search is now also available to developers free of charge for integration into any application. Like the search application offered by Elastic as a managed service since a year ago, the on-premise version also offers comprehensive configuration options from data ingestion to APIs and UI frameworks to relevance control and analysis of search queries.

Here is Raspberry Pi 4, with 4 GB of RAM and 4K output

Other improvements in Elastic Stack 7.2 mainly concern improvements in observability. Elastic APM now has the first beta version of the long-announced .Net Agent. In addition, the browser-based Real User Monitoring (RUM) agent now also supports single-page applications. A new Metrics Explorer also provides deeper insights into key infrastructure metrics. Especially in cloud-native environments, within the framework of the Kubernet and container monitoring, NATS, CoreDNS and the log format CRI-O can now also be used.

A complete overview of all the improvements in Elastic Stack 7.2 can be found in the blog post for release.

Wine project fears problems with 64-bit Ubuntu

SHARE
Previous articleSeven Linux distributions that will help you recover a broken system
Next articleKafka 2.3 promises uninterrupted realignment of the Connect Worker
Aakash Molpariya
Aakash started in Nov 2018 as a writer at Revyuh.com. Since joining, as writer, he is mainly responsible for Software, Science, programming, system administration and the Technology ecosystem, but due to his versatility he is used for everything possible. He writes about topics ranging from AI to hardware to games, stands in front of and behind the camera, creates creative product images and much more. He is a trained IT systems engineer and has studied computer science. By the way, he is enthusiastic about his own small projects in game development, hardware-handicraft, digital art, gaming and music. Email: aakash (at) revyuh (dot) com

LEAVE A REPLY