Professional skills
Elastic Security for SIEM
Use Elastic Security for SIEM to triage alerts, investigate events in Timeline, and run a threat hunting capstone.
THE BIG PICTURE
About this course
This course is built for analysts who use the Elastic Security for SIEM solution. It walks through the architecture behind the Elastic Stack, Fleet, and Elastic Agent. You then learn how to create visualizations and dashboards and how to use Lens, before moving into the Security App. Finally, a threat hunting capstone exercise ties the material together. Contact MindClick for the delivery format, teaching language, instructor profile, duration, dates, and a written fee proposal. Elastic, Elasticsearch, and Kibana are trademarks of Elasticsearch B.V. This listing describes training and study support on those products. It is not an official Elastic course, an Elastic certification, or a claim of authorized Elastic training-partner status. Certification exams are purchased and administered by Elastic.
What you’ll learn
- Work confidently with stack overview in Elastic.
- Work confidently with elastic Common Schema (ECS) in Elastic.
- Work confidently with discover in Elastic.
- Work confidently with visualizations in Elastic.
- Work confidently with dashboards in Elastic.
- Work confidently with security App in Elastic.
- Work confidently with hunt capstone in Elastic.
A CLEAR PATH FORWARD
Recommended learning plan
Learn through guided exercises on an Elastic cluster, with discussion time and work you can take back to your own environment.
- Learning route
- 5 recommended days
- Practical work
- 5 guided activities
- Finish with
- A practical review
Take a look at each day. Open a section to see the topics and practical work.
Day 1Stack overview and Security App
What we’ll cover
- Stack overview
- Security App
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 2Elastic Common Schema (ECS) and Hunt capstone
What we’ll cover
- Elastic Common Schema (ECS)
- Hunt capstone
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 3Discover
What we’ll cover
- Discover
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 4Visualizations
What we’ll cover
- Visualizations
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Day 5Dashboards
What we’ll cover
- Dashboards
Put it into practice
Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.
You’ll take away
A worked example with notes you can reuse at work.
Bring it all together
Review your worked examples with the trainer and agree the next steps for your own role.
Before you choose your learning route
Elastic, Elasticsearch, and Kibana are trademarks of Elasticsearch B.V. This listing describes training and study support on those products. It is not an official Elastic course, an Elastic certification, or a claim of authorized Elastic training-partner status. Certification exams are purchased and administered by Elastic.
Pricing
| Delivery format | Price per learner |
|---|---|
| Live online | $2,350 USD |
| Classroom | $4,500 USD |
Pricing for India is confirmed separately by an advisor and is not listed here. Singapore and Dubai are the priority classroom markets.
A listed price is not a quotation. Confirm the current fee, taxes, exam inclusion, study materials and any group rate in writing before enrolling.
Prerequisites
- A basic understanding of networking: TCP/IP, common ports and protocols, routers, switches, and firewalls. Familiarity with network monitoring tools such as an IDS (Suricata), Zeek, or a packet capture tool. Operating system basics for Windows and Linux: file systems and permissions, and command line navigation. Awareness of vulnerability and exploit methodology: reconnaissance, command and control, and data exfiltration.
Who is this course for?
- Security analysts monitoring network and host logs through a SIEM.
- SOC engineers working with detection rules and alert triage.
- Threat hunters investigating events with Timeline and Cases.
- Analysts preparing for the Elastic Certified SIEM Analyst exam.
Confirmed batch starts
Dates confirmed by MindClick. These are start dates, not full course timetables. Session hours, duration, fees, instructors, language, seats and classroom venues are not yet specified.
Choose your country & month Enrollment & payment
Starts 2026-10-10
Classroom · Dubai, United Arab Emirates · weekend start
Local date · Asia/Dubai
Venue to be confirmedStarts 2026-10-10
Classroom · Vienna, Austria · weekend start
Local date · Europe/Vienna
Venue to be confirmedStarts 2026-10-10
Classroom · Sydney, Australia · weekend start
Local date · Australia/Sydney
Venue to be confirmedStarts 2026-10-10
Classroom · Brussels, Belgium · weekend start
Local date · Europe/Brussels
Venue to be confirmedStarts 2026-10-10
Classroom · Manama, Bahrain · weekend start
Local date · Asia/Bahrain
Venue to be confirmedStarts 2026-10-10
Classroom · São Paulo, Brazil · weekend start
Local date · America/Sao_Paulo
Venue to be confirmedFrequently asked questions
Is this an official Elastic course?
No. This is MindClick training and study support on Elastic products. It is not an official Elastic course and MindClick does not claim Elastic training-partner status. Elastic publishes its own instructor-led courses and certification exams at elastic.co/training.
How long is the training?
Elastic lists this topic at 24 hours. MindClick confirms the actual duration, session hours, and schedule for your individual or team inquiry.
What does it cost?
Fees depend on delivery format, group size, language, and location. Request a written proposal and confirm taxes, materials, and any exam fees before enrolling.
Will this guarantee I pass the Elastic certification exam?
No. Training supports your preparation, but Elastic sets the exam objectives and pass criteria. Completing training does not guarantee certification, an exam pass, or employment.
What does this course cost?
Outside India this 5-day course is listed at USD 4,500 for classroom delivery and USD 2,350 for live online delivery, per learner. Pricing for India is confirmed separately by an advisor and is not listed here. Confirm taxes, exam fees, study materials and group rates in writing before enrolling; a listed price is not a quotation.
Where is classroom training delivered?
Singapore and Dubai are the priority classroom markets for this catalog. Classroom delivery is also available in the other listed countries, and live online delivery is available everywhere. Venues are confirmed per booking; a listed city is a training market, not an owned campus.
KEEP EXPLORING
More ways to move forward.
Related training from the course catalog.
Elasticsearch Engineer Training
Build, search, scale, and operate Elasticsearch clusters, then prepare for the Elastic Certified Engineer exam.
Data Analysis with Kibana
Analyze Elasticsearch data in Kibana, from aggregation charts to geo maps, machine learning results, and alerting.
Elastic Observability Engineer Training
Collect logs, metrics, uptime, and APM data into Elasticsearch, then analyze and act on it in Kibana.
Elastic Security for Endpoint
Investigate host-based alerts from Elastic Defend, enrich security data, and hunt threats on the endpoint.