Configure the risk scoring engine
One step with Elastic Stack. We can help you get access.
Get something done
Configure the risk scoring engine
with Elastic Stack · Cybersecurity Management
Use Elastic Stack: its Kibana Security Entity Analytics API lets you configure the risk scoring engine in a single step (PATCH /api/risk_score/engine/saved_object/configure). capabilities.work can help you get signed up and connected.
- Can I exclude closed alerts or certain alert tags from risk score calculations?
- How do I change the time range the risk engine looks back over?
- Can risk scores be reset to zero for entities with no recent alerts?
Say it to your AI assistant
- Configure the risk engine to ignore alerts with statuses {exclude_alert_statuses}.
- Set the risk engine lookback range to {range}.
- Exclude alerts tagged {exclude_alert_tags} from risk scoring.
For your developer
PATCH /api/risk_score/engine/saved_object/configure in Kibana Security Entity Analytics API. Full spec on APIs.io.