Skip to content

Commit e26a27e

Browse files
authored
Add secops guides for network and hosts (#249)
* New starter docs for secops * Set up secops guides for network and hosts * Add new files * Remove DS_Store file
1 parent d0b93ef commit e26a27e

14 files changed

+176
-53
lines changed
-27 KB
Binary file not shown.

docs/en/secops/index.asciidoc

Lines changed: 0 additions & 17 deletions
This file was deleted.

docs/en/secops/overview.asciidoc

Lines changed: 0 additions & 20 deletions
This file was deleted.

docs/en/secops/sec-ui.asciidoc

Lines changed: 0 additions & 14 deletions
This file was deleted.
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
[[hosts-ui-overview]]
2+
[role="xpack"]
3+
== Hosts UI
4+
5+
beta[]
6+
7+
After you have security monitoring <<install-hosts-monitoring,up and
8+
running>> and data is streaming to {es}, use the Hosts UI in {kib} to monitor
9+
and identify security problems in real time.
10+
11+
For more information about working with the Hosts UI, see the
12+
{kib} documentation.
13+
14+
37.4 KB
Loading

docs/en/siem/hosts/index.asciidoc

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
:doctype: book
2+
//:hosts-soln-cap: Hosts monitoring
3+
//:hosts-soln: hosts monitoring
4+
//:hosts-ui: Hosts UI
5+
6+
= Hosts Monitoring Guide
7+
8+
//include::{asciidoc-dir}/../../shared/versions.asciidoc[]
9+
10+
include::{asciidoc-dir}/../../shared/attributes.asciidoc[]
11+
12+
include::overview.asciidoc[]
13+
14+
include::installation.asciidoc[]
15+
16+
include::hosts-ui.asciidoc[]
17+
Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
[[install-sec-monitoring]]
1+
[[install-hosts-monitoring]]
22
[role="xpack"]
33
== Get up and running
44

@@ -27,7 +27,7 @@ such as the index pattern used to query the data, and the timestamp field used
2727
for sorting. For more information, see {kib}.
2828

2929
[float]
30-
[[install-beats-for-sec]]
30+
[[install-beats-for-host-sec]]
3131
=== Install {beats} shippers
3232

3333
To populate the security UI with metrics and
Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
[[hosts-monitoring-overview]]
2+
[role="xpack"]
3+
== Overview
4+
5+
beta[]
6+
7+
Host monitoring gives you a comprehensive view into your security operations.
8+
9+
The UI in {kib} brings together data from a variety of sources, making it easier
10+
for you to identify and resolve security issues.
11+
12+
[float]
13+
[[hosts-components]]
14+
=== Hosts monitoring components
15+
16+
Security monitoring requires the following {stack} components.
17+
18+
image::images/hosts-security-architecture.png[]
19+
20+
*https://www.elastic.co/products/beats[{beats}]* are open source data
21+
shippers that you install as agents on your servers to send operational data to
22+
{es}.
23+
24+
*https://www.elastic.co/products/elasticsearch[{es}]* is a real-time,
25+
distributed storage, search, and analytics engine. {es} excels is indexing
26+
streams of semi-structured data, such as logs or metrics.
27+
28+
*https://www.elastic.co/products/kibana[{kib}]* is an open source analytics and
29+
visualization platform designed to work with {es}. You use {kib} to search,
30+
view, and interact with data stored in {es} indices. You can easily perform
31+
advanced data analysis and visualize your data in a variety of charts, tables,
32+
and maps.
33+
34+
{kib} Hosts UI provides a dedicated user interface for visualizing host security.
37.4 KB
Loading

0 commit comments

Comments
 (0)