Card #2801 · Elastic (Elasticsearch / Kibana)
Pre-built ML jobs and detection rules do not support custom app data
Out-of-the-box ML jobs and detection rules are designed for specific integrations and do not work with custom application data sources. To detect unusual login volumes or brute force attacks for custom apps, users must manually create custom ML jobs and security rules.
Pain score
0.51/ 1.00 · weighted product of four components
Reach0.50distinct authors (log-normalized)
Recency0.84freshness decay, half-life months
Engagement0.36upvotes + comments, normalized
Monetization0.50willingness-to-pay cues in evidence
§ Evidence — 3 verified quotes
by default it does not work for custom app, correct ?
All pre-built ML Jobs and Detection Rules will use data from know integrations, like System, Audit etc. Any logs from Custom Applications will require custom ML jobs and custom security rules.
pre-built detection rules and ML jobs expected data from existing integrations.
Comments are a Pro feature — join the conversation, share what you've shipped, hear what others are building.
Upgrade to Pro