Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ML page with anomaly detection jobs from Elastic integrations #3648

Merged
merged 17 commits into from
Aug 9, 2023
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions docs/detections/machine-learning/machine-learning.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,10 @@ Or
* Your shipped data is ECS-compliant, and {kib} is configured with the shipped
data's index patterns in *{kib}* -> *{stack-manage-app}* -> *Data Views*.

Or

* You install one or more of the Advanced Analytics integrations (refer to the following section).

<<prebuilt-ml-jobs>> describes all available {ml} jobs and lists which ECS
fields are required on your hosts when you are not using {beats} or the {agent}
to ship your data. For information on tuning anomaly results to reduce the
Expand All @@ -76,6 +80,19 @@ prior to the time they are enabled. After jobs are enabled, they continuously
analyze incoming data. When jobs are stopped and restarted within the two-week
time frame, previously analyzed data is not processed again.

[float]
susan-shu-c marked this conversation as resolved.
Show resolved Hide resolved
[[ml-integrations]]
=== Jobs in Advanced Analytics (UEBA) Elastic integrations

You can also install {ml} jobs using https://docs.elastic.co/integrations[Elastic integrations]. Here are the Advanced Analytics integrations available for Security:

* https://docs.elastic.co/integrations/ded[Data Exfiltration Detection]
* https://docs.elastic.co/integrations/dga[Domain Generation Algorithm Detection]
* https://docs.elastic.co/integrations/lmd[Lateral Movement Detection]
* https://docs.elastic.co/integrations/problemchild[Living off the Land Attack Detection]

To learn more about {ml} jobs enabled by these integrations, refer to the https://www.elastic.co/guide/en/security/current/prebuilt-ml-jobs.html[Prebuilt jobs page].

[float]
[[view-anomalies]]
== View detected anomalies
Expand Down