b59bd97794
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com> Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
17 lines
794 B
Plaintext
17 lines
794 B
Plaintext
[role="xpack"]
|
|
[[machine-learning]]
|
|
== Anomaly Detection with Machine Learning
|
|
|
|
For *{ess-trial}[Free Trial]*
|
|
and *https://www.elastic.co/subscriptions[Platinum License]* deployments,
|
|
Machine Learning functionality is available throughout the SIEM app. You can
|
|
view the details of detected anomalies within the `Anomalies` table widget
|
|
shown on the Hosts, Network and associated Details pages, or even narrow to
|
|
the specific daterange of an anomaly from the `Max Anomaly Score` details in
|
|
the overview of the Host and IP Details pages. Each of these interfaces also
|
|
offer the ability to drag and drop details of the anomaly to Timeline, such
|
|
as the `Entity` itself, or any of the associated `Influencers`.
|
|
|
|
[role="screenshot"]
|
|
image::siem/images/ml-ui.png[Machine Learning - Max Anomaly Score]
|