Getting started with Elasticsearch

Elasticsearch plays a central role in modern security operations, especially within SIEM environments that rely on fast search and large scale log analysis. This webinar introduces the fundamentals of Elasticsearch, the core engine of the Elastic Stack, and explains how it stores and indexes data for real time search and analytics. The session walks through deployment basics, data ingestion, and management using REST APIs and the user interface.

Attendees will also see how to run search queries, configure fields with text analysis, and use aggregations for analytics. The webinar covers geo spatial queries and analyzer features, which are commonly applied in security monitoring and investigation workflows.