Elastic Belgium User Group

Join the Elastic Back To School Series, a series of 4 different hands-on workshops on ES|QL, Search, Observability and Security. This third edition will take on October 23rd and we will cover 'A Modern Logging Workflow'.
Limited seating available, to keep this workshop interactive.

Important: As this is a hands-on workshop, please bring your (charged) laptop and charger!

Location: The meetup will be sponsored by and hosted at Betacowork (Rue des Peres Blancs 4, 1040 Bruxelles).

Agenda:
17:45 : Doors open
18:00 - 18:30 : Drinks and pizza
18:30 - 18:45 : Welcome
18:45 - 20:45 : Observability Workshop: A Modern Logging Workflow
20:45 : Networking and drinks

Talks:
Observability Workshop: A Modern Logging Workflow
This is the first workshop in the back to school series. This one will be all about observability, and more specifically logging. Everyone will get a lab environment and you will learn about the newest logging capabilities of Elastic. Don’t forget to bring a (charged) laptop and a charger.

Over the last few years, Elastic has rebuilt its logging toolset to match the scale of the very systems it is observing. Elastic’s logging tools let SREs and Developers quickly and easily employ parsing, aggregations, and visualizations (ES|QL, Streams) as part of their daily-driver RCA workflows. Elastic has carefully woven ML (log rate analysis, log pattern analysis) and AI (generating GROK patterns and ES|QL queries) into those tools in ways which remove tedious and complex tasks, allowing the SRE and Developer to focus their attention on quickly and accurately determining a Root Cause. This in turn helps keep MTTR constant, regardless of growth in the scale and complexity of the system you are observing.

What you’ll learn:
• Using ES|QL to search logs
• Using ES|QL to parse logs at query-time
• Using ES|QL to do advanced aggregations, analytics, and visualizations
• Creating a useful dashboard
• Using ES|QL to create alerts
• Using AI Assistant to help write ES|QL queries
• Using Streams to setup ingest-time log processing pipeline
(GROK parsing, geo-location, User Agent parsing)
• Setting up SLOs
• Using Maps to visualize geographic information
• Scheduling dashboard reports
• Setting up a Pivot Transform
• Setting up RBAC
• Setting up data retention

Join the Elastic Back To School Series, a series of 4 different hands-on workshops on ES|QL, Search, Observability and Security. This last edition will take on November 20th and we will cover 'Threat Hunting with Elastic'.
Limited seating available, to keep this workshop interactive.

Important: As this is a hands-on workshop, please bring your (charged) laptop and charger!

Location: The meetup will be sponsored by and hosted at Betacowork (Rue des Peres Blancs 4, 1040 Bruxelles).

Agenda:
17:45 : Doors open
18:00 - 18:30 : Drinks and pizza
18:30 - 18:45 : Welcome
18:45 - 20:45 : Security Workshop: Threat Hunting with Elastic
20:45 : Networking and drinks

Talks:
Security Workshop: Threat Hunting with Elastic
This workshop will be focused on advanced analytics with the Elastic platform which helps in enhancing the capability and visibility of security operations. The attendees will be provided a hypothesis and will leverage various capabilities within the Elastic platform to understand the scope of a specific cyber threat.

Participants will learn about ES|QL, Timelines, Graph, and Event Analyzer to stitch together an attack chain postmortem.

Thanks to Betacowork for hosting this meetup!