Skip to content

Commit e68abe0

Browse files
authored
[DOCS] Updates list of security and auditbeat anomaly detection configurations (#2140)
1 parent 2581a56 commit e68abe0

File tree

3 files changed

+142
-343
lines changed

3 files changed

+142
-343
lines changed

docs/en/stack/ml/anomaly-detection/ootb-ml-jobs-auditbeat.asciidoc

Lines changed: 0 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -31,28 +31,4 @@ https://github.com/elastic/kibana/blob/{branch}/x-pack/plugins/ml/server/models/
3131

3232
|===
3333

34-
[discrete]
35-
[[auditbeat-process-hosts-ecs]]
36-
== Auditbeat host processes
37-
38-
Detect unusual processes on hosts from auditd data (ECS).
39-
40-
These configurations are only available if data exists that matches the
41-
recognizer query specified in the
42-
https://github.com/elastic/kibana/blob/{branch}/x-pack/plugins/ml/server/models/data_recognizer/modules/auditbeat_process_hosts_ecs/manifest.json[manifest file].
43-
44-
|===
45-
|Name |Description |Job |Datafeed
46-
47-
|hosts_high_count_process_events_ecs
48-
|Detect unusual increases in process execution rates (ECS)
49-
|https://github.com/elastic/kibana/blob/{branch}/x-pack/plugins/ml/server/models/data_recognizer/modules/auditbeat_process_hosts_ecs/ml/hosts_high_count_process_events_ecs.json[image:images/link.svg[A link icon]]
50-
|https://github.com/elastic/kibana/blob/{branch}/x-pack/plugins/ml/server/models/data_recognizer/modules/auditbeat_process_hosts_ecs/ml/datafeed_hosts_high_count_process_events_ecs.json[image:images/link.svg[A link icon]]
51-
52-
|hosts_rare_process_activity_ecs
53-
|Detect rare process executions on hosts (ECS)
54-
|https://github.com/elastic/kibana/blob/{branch}/x-pack/plugins/ml/server/models/data_recognizer/modules/auditbeat_process_hosts_ecs/ml/hosts_rare_process_activity_ecs.json[image:images/link.svg[A link icon]]
55-
|https://github.com/elastic/kibana/blob/{branch}/x-pack/plugins/ml/server/models/data_recognizer/modules/auditbeat_process_hosts_ecs/ml/datafeed_hosts_rare_process_activity_ecs.json[image:images/link.svg[A link icon]]
56-
57-
|===
5834
// end::auditbeat-jobs[]

0 commit comments

Comments
 (0)