Skip to content
IT Atlas

SIEM

Elastic Security

Search based security analytics with open detection rules and an EDR agent.

HybridOpen SourceMonitoring

Entry record

Supplier
Elastic
Function
SIEM
Deployment model
Hybrid
Licensing
Open Source
Security function
Monitoring

Where the function is explained

Understand the function before comparing platforms that perform it.

SIEM

Security Information and Event Management centralises telemetry from across the estate, correlates it into detections, and supports investigation and reporting.

Topics that reference this platform

SIEM

Security Information and Event Management centralises telemetry from across the estate, correlates it into detections, and supports investigation and reporting.

Other platforms in SIEM

Listed together because they perform the same function, not because one is better.

Microsoft SentinelSplunk Enterprise Security

Editorial note

This entry records function, deployment model and licensing so a platform can be placed against a requirement. IT Atlas publishes no ranking, score or recommendation, and version specific behaviour should always be confirmed in the supplier's own documentation.

In the knowledge graph

Open the interactive map centred on this entity to see everything it connects to and travel outwards from there.

Explore Elastic Security in the knowledge graph