Certification preparation
Elastic Certified SIEM Analyst Exam Preparation
Exam-focused study support for the Elastic Certified SIEM Analyst exam covering ECS, dashboards, and the Security App.
THE BIG PICTURE
About this course
To become an Elastic Certified SIEM Analyst, candidates pass a timed, cognitive-based exam with multiple choice, select-all-that-apply, fill-in-the-blank, and true or false questions centered on the Elastic Security solution. MindClick provides preparation and study support; the exam itself is purchased and administered by Elastic. Contact MindClick for the delivery format, teaching language, instructor profile, duration, dates, and a written fee proposal. Elastic, Elasticsearch, and Kibana are trademarks of Elasticsearch B.V. This listing describes training and study support on those products. It is not an official Elastic course, an Elastic certification, or a claim of authorized Elastic training-partner status. Certification exams are purchased and administered by Elastic.
What you’ll learn
- Work confidently with stack architecture in Elastic.
- Work confidently with elastic Common Schema (ECS) in Elastic.
- Work confidently with discover in Elastic.
- Work confidently with visualizations in Elastic.
- Work confidently with dashboards in Elastic.
- Work confidently with security application in Elastic.
A CLEAR PATH FORWARD
Recommended learning plan
Learn through guided exercises on an Elastic cluster, with discussion time and work you can take back to your own environment.
- Learning route
- 5 recommended days
- Practical work
- 5 guided activities
- Finish with
- A practical review
Take a look at each day. Open a section to see the topics and practical work.
Day 1Stack architecture and Security application
What we’ll cover
- Stack architecture
- Security application
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 2Elastic Common Schema (ECS)
What we’ll cover
- Elastic Common Schema (ECS)
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 3Discover
What we’ll cover
- Discover
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 4Visualizations
What we’ll cover
- Visualizations
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 5Dashboards
What we’ll cover
- Dashboards
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Bring it all together
Review your worked examples with the trainer and agree the next steps for your own role.
Before you choose your learning route
Elastic, Elasticsearch, and Kibana are trademarks of Elasticsearch B.V. This listing describes training and study support on those products. It is not an official Elastic course, an Elastic certification, or a claim of authorized Elastic training-partner status. Certification exams are purchased and administered by Elastic.
Pricing
| Delivery format | Price per learner |
|---|---|
| Live online | $2,350 USD |
| Classroom | $4,500 USD |
Pricing for India is confirmed separately by an advisor and is not listed here. Singapore and Dubai are the priority classroom markets.
A listed price is not a quotation. Confirm the current fee, taxes, exam inclusion, study materials and any group rate in writing before enrolling.
Prerequisites
- Elastic recommends completing the Elastic Security for SIEM course, or the equivalent self-paced learning plan, before attempting the exam.
Who is this course for?
- Security analysts working day to day in Elastic Security.
- SOC practitioners handling detection rules, Timeline, and Cases.
- Teams validating Elastic SIEM analysis skills.
Confirmed batch starts
Dates confirmed by MindClick. These are start dates, not full course timetables. Session hours, duration, fees, instructors, language, seats and classroom venues are not yet specified.
Choose your country & month Enrollment & payment
Starts 2026-10-25
Live online · Manama, Bahrain · weekday start
Local date · Asia/Bahrain
Joining details to be suppliedStarts 2026-10-25
Live online · Cairo, Egypt · weekday start
Local date · Africa/Cairo
Joining details to be suppliedStarts 2026-10-25
Live online · Kuwait City, Kuwait · weekday start
Local date · Asia/Kuwait
Joining details to be suppliedStarts 2026-10-25
Live online · Muscat, Oman · weekday start
Local date · Asia/Muscat
Joining details to be suppliedStarts 2026-10-25
Live online · Doha, Qatar · weekday start
Local date · Asia/Qatar
Joining details to be suppliedStarts 2026-10-25
Live online · Riyadh, Saudi Arabia · weekday start
Local date · Asia/Riyadh
Joining details to be suppliedFrequently asked questions
Is this an official Elastic course?
No. This is MindClick training and study support on Elastic products. It is not an official Elastic course and MindClick does not claim Elastic training-partner status. Elastic publishes its own instructor-led courses and certification exams at elastic.co/training.
How long is the training?
Elastic lists this topic at 2-hour cognitive-based exam. MindClick confirms the actual duration, session hours, and schedule for your individual or team inquiry.
What does it cost?
Fees depend on delivery format, group size, language, and location. Request a written proposal and confirm taxes, materials, and any exam fees before enrolling.
Does this include the exam?
No. Elastic sells and administers its certification exams directly. MindClick provides preparation and study support only. Check current exam objectives, format, and pricing with Elastic before booking.
What does this course cost?
Outside India this 5-day course is listed at USD 4,500 for classroom delivery and USD 2,350 for live online delivery, per learner. Pricing for India is confirmed separately by an advisor and is not listed here. Confirm taxes, exam fees, study materials and group rates in writing before enrolling; a listed price is not a quotation.
Where is classroom training delivered?
Singapore and Dubai are the priority classroom markets for this catalog. Classroom delivery is also available in the other listed countries, and live online delivery is available everywhere. Venues are confirmed per booking; a listed city is a training market, not an owned campus.
KEEP EXPLORING
More ways to move forward.
Related training from the course catalog.
Elasticsearch Engineer Training
Build, search, scale, and operate Elasticsearch clusters, then prepare for the Elastic Certified Engineer exam.
Data Analysis with Kibana
Analyze Elasticsearch data in Kibana, from aggregation charts to geo maps, machine learning results, and alerting.
Elastic Observability Engineer Training
Collect logs, metrics, uptime, and APM data into Elasticsearch, then analyze and act on it in Kibana.
Elastic Security for SIEM
Use Elastic Security for SIEM to triage alerts, investigate events in Timeline, and run a threat hunting capstone.