Name: Alert Fatigue Therapy: How to Write Detection Rules That Don't Suck
Start: 2025-11-19T16:45:00.000Z
Location: Elasticsearch, Inc.

**Data:** 4 listopada 2025
**Godzina:** 13:00 – 14:00 (PL)
**Online:** www.youtube.com/watch?v=Bspd_E3gmxE
**Prelegent:** Piotr Przybyl, Senior Developer Advocate dla Elastic

**Opis spotkania**

**ES\|QL: nowy sposób wyciągania danych z Elasticsearch**
Wiele osób myśli\, że Elasticsearch to wciąż tylko wyszukiwanie tekstowe i że można je wykonać jedynie przy pomocy QueryDSL \(w JSONie\) albo KQL w Kibanie\. Tymczasem ludzie z Elastica stworzyli nowy język do wyciągania i wizualizacji danych: ES\|QL\. Trochę wygląda jak skrzyżowanie Basha z SQLem\, ale dzięki temu jest zwykle szybszy i prostszy do zrozumienia dla ludzi i… komputerów\.

**O prelegencie**

**Piotr Przybyl** to Senior Developer Advocate w Elastic, znany z dynamicznych i pełnych konkretów prezentacji. Od lat dzieli się wiedzą na konferencjach i meetupach, pomagając deweloperom lepiej zrozumieć narzędzia, z których korzystają na co dzień. Java Champion, Testcontainers Champion.

**Dołącz do nas!**

To pierwsze z trzech spotkań poświęconych Elasticowi, prowadzonych w języku polskim.

**Link:** **www.youtube.com/watch?v=Bspd_E3gmxE**

Elastic Warsaw User Group

Elastic Meetup Team

Tomasz Browarczyk

Lukas

Piotr Socik

Wioletta Majek

Dastin Sandura

Andrzej

Adam Lazarus

Marek Siwiec

Paweł Siwak

ES|QL: nowy sposób wyciągania danych z Elasticsearcha

Online event

Join us for a meetup at Motorworld on Wednesday November 5th, the eve before ElasticON!

We'll have presentations, networking, pizza and refreshments.

**Address**
Motorworld Munich - Stellwerk 2
[Am Ausbesserungswerk 8 · München, BY](https://maps.app.goo.gl/hGCA7X7FWfQhku4u9)
*When you arrive, please inform your name and that you will go to the meetup at Stellwerk 2.*

**Agenda**
18.00: Doors Open, join us for pizza and a drink

18.20: Talk #1: **Building AI Agents with Elastic Agent Builder and MCP**
**[Tatiana Finamor](https://www.linkedin.com/in/tatianafinamor/)**, Customer Architect at Elastic
**Abstract:** The Model Context Protocol (MCP) creates a bridge between AI models and external tools, allowing them to exchange information in a structured and secure way.
In this session, we will look at how Elastic fits into this new ecosystem.
We will demonstrate how to use Claude Desktop to query Elastic data through MCP using natural language, and how the Elastic Agent Builder can be used within a serverless project to build and deploy intelligent, data-aware agents.
This session is a practical introduction for anyone curious about combining Elastic with modern AI frameworks to simplify data access, automation, and intelligent interaction.

19.00: Talk #2: **Intro to the Elastic Inference Service (EIS)**
**[Max Jakob](https://www.linkedin.com/in/maxjakob/)**, Principal Software Engineer I - Search Experiences at Elastic
**[Tim Grein](https://www.linkedin.com/in/tim-grein/)**, Senior Software Engineer at Elastic
**Abstract:** AI models are everywhere in search these days. In this talk, we will present the Elastic Inference Service (EIS), the new way to apply AI models within the Elastic Stack. This GPU-backed service enables high throughput ingest, low latency search, reranking and LLM chat that all integrate neatly with Elasticsearch and Kibana. Everything is managed by Elastic, no need for users to configure any infrastructure or models. Get started with semantic search and built-in Kibana AI features out-of-the-box! We will demo what's possible today and give an outlook into what's coming in the next months.

19.40 Lightning Talk **Evolution of search - from keyword to contextual**
**[Petar Perković](https://www.linkedin.com/in/petar-perkovi%C4%87-661734150/)**, Data Science and DWH Engineering Manager at Njuškalo
**[Nikolina Kosanović](https://www.linkedin.com/in/nikolina-kosanovi%C4%87-79541786/)**, Senior ML Engineer at Njuškalo
**Abstract:** Search technology has come a long way from simple keyword matching to systems that truly understand meaning and context. In this talk, we’ll trace that evolution - from traditional keyword search to semantic and contextual search, and explore how each approach impacts relevance and user experience. Using real-world examples and practical comparisons, we’ll uncover how these techniques work under the hood, where Elastic fits in and how we use it at Njuškalo.

19.55: Networking

20.30: Close

PS: Join ElasticON Munich the next day — a free, full-day conference on search, observability, and security with Elastic, you can register [here](https://www.elastic.co/events/elasticon/munich).

Search Meetup Munich

Björn Francescato

Dirk Gómez

Karlheinz Kleinhenz

Eduard Frank

Jeff Fan

Chris D.

Frank Merwerth 

Hottner Georg

Victor Kazakov

Ivan Zalozhnykh

Peter Weber

Georg Hottner

Suny

Abrar

Robert Haarmeyer

Philip Schmitt

Brad Llewellyn

Jürgen F.

AI Agents with Elastic Agent Builder & Introduction to Elastic Inference Service

Motorworld Munich

**NOTE: Access to this meetup is restricted. Please ensure you register on Luma:** [https://ela.st/xqjyjusi](https://ela.st/xqjyjusi)

Get ready for an exciting evening where **Elastic**, **Confluent**, and **Kong** come together to showcase how **Generative AI is transforming modern data, APIs, and search**.

Join us as we dive into **real-world use cases**, live demos, and community conversations around building AI-powered experiences using today’s most powerful technologies.

​**What You’ll Learn:**

* **Elastic** — powering search, analytics & data management with Elasticsearch
* **GenAI + Elastic** — RAG pipelines, semantic search & grounding LLMs with enterprise data
* **Confluent** — streaming data in motion to feed intelligent AI pipelines
* **Broadcom** \- integration with infrastructure\, security\, and enterprise systems

**Speakers:**
Will be announced soon — stay tuned!

**Who should join:**
Whether you’re new to these technologies or already building with them, this event has something for you!

* Curious about **Elastic, Confluent, or Kong** and want a friendly intro
* Want to understand how **GenAI meets data, APIs, and real-time systems**
* Love geeking out about **search, datastores, or system design**
* Already hands-on and keen to **share, learn, and connect** with peers

Everyone’s welcome — come for the talks, stay for the community!

**NOTE: Access to this meetup is restricted. Please ensure you register on Luma:** [https://ela.st/xqjyjusi](https://ela.st/xqjyjusi)

Elastic Hyderabad User Group

Kartikay Sharma (Elastic)

Someshwaran Mohankumar

Jayant Acharya

charan

jonnalagadda dinesh

Deekshith Kolan

Abhishek P

Vaibhav Dubey

Rasheed Ali Shaik

Kancharla Chaitanya

Mahankali Anjani

vikasprajapati

Jaya Simha Reddy Nandyala

Krishna Kanth

akshayr2k4

Garika Venkata parimala

manasavonguri

siva naga prasa

sajith shaik

GenAI in Action: Elastic × Confluent × Kong x Broadcom

Meet us for talks at Zalando on November 12, 2025!

Doors open at 18.00 with pizza, refreshments, and networking to follow. We wrap up at 20.30.

Please make sure you sign up with your full name.

📅**Date and Time:**
Wednesday, November 12, from 6:00-8:30 PM

📍**Location:**
[Zalando Office BHW](https://maps.app.goo.gl/GELYd8FH7AnqEFNF8)
Berlin Hedwig-Wachenheimstraße 7 (BHW)
The main entrance is on the west-side of the building (towards Uber Arena). Participants should register at the Helpdesk, and will be picked up from there.

📝 **Agenda:**

* **18:00 - Doors Open**
Please have your real name in your profile description because the security team will check if you're registered when you arrive.
* **18:30 - Talk #1** **\- The Performance Paradox: When Slower Code Doesn't Slow You Down**
**[Anderson Queiroz](https://www.linkedin.com/in/andersonq/)** \- Senior Software Engineer at Elastic
**Abstract:** We added on-the-fly gzip decompression to Elastic Filebeat and the Elastic Agent—our log collection tools—to enable the ingestion of gzip archives and rotated logs. A performance drop was expected, so we benchmarked the feature only to find that the performance didn't drop at all. This talk is the story of our hunt for a non-existent bottleneck and how a holistic view of application performance uncovered the surprising truth about where the real costs lie.
* **19:00 - Talk #2 TBC**
* **19:30 - Pizza, drinks and networking**
* **20:30 - Wrap up**

Invite your friends and join our meetup. Special thanks to our hosts **[Zalando.](https://en.zalando.de/?_rfl=de)**

Want to speak at our next meetup? Submit your talk on **[this link](https://sessionize.com/elastic-meetups/)** and we will get in touch with you as soon as possible.

Elasticsearch Berlin

Merhawi Tsegay

Shyju Thankachan

Jazib Humayun

Jon Samwell

likhithakosuri

Teja

Jatinder Singh

Grace Thomas

Cédric Fraboulet

Cem Karakurt

Matthias Prellwitz

Jilles Van Gurp

Victor Gras

kavè

Ayd Asraf

Heramb Nishad

Arunav Konwar

Manash Mandal

Mohamed Essam

Elastic & Zalando: Elastic Filebeat and Agent

Zalando BHW

Join us for a meetup on **November 19th** in our Elastic office in Amsterdam! Doors open at 17.45 and the presentations begin at 18.00. Food, refreshments, and networking to follow. We wrap up around 20.00.

We are rating our talks as follows:
🟢 = Beginner content
🟡 = Intermediate content
🔵 = Expert content

**Address:** Elastic's office, Keizersgracht 281, 1016 ED Amsterdam

**Agenda:**
17.45: Doors open
18.00: Alert Fatigue Therapy: How to Write Detection Rules That Don’t Suck
18.45: Catching up with the latest Detection Engineering developments in Elastic Security
19.30: Networking, food with drinks
20.00: Wrap up

**Talks:**
**Alert Fatigue Therapy: How to Write Detection Rules That Don’t Suck**
False positives burn out analysts. False negatives burn down businesses. Every detection rule we write lives in the tension between those two extremes.In this talk, we’ll explore what it really means to write great rules; not just technically sound ones, but sustainable ones. We’ll unpack how false positives and false negatives are inseparably linked, why perfect rules don’t exist, and how the smartest SOCs continuously tune, test, and enrich their analytics to reach higher fidelity.You’ll also see how data enrichment, contextual correlation, and thoughtful rule design can transform noisy detections into trusted analytics; improving not only accuracy, but also analyst confidence and overall SOC health. And of course, we’ll showcase some of these capabilities in action with Elastic Security!

***Key Takeaways:***
• Cut the noise: balance false positives and missed detections.
• Use context and enrichment to turn alerts into insights.
• Build rules that analysts trust — tested, tuned, and efficient.

*Speaker: Marvin Ngoma, Principal Solutions Architect, Elastic*

**Catching up with the latest Detection Engineering developments in Elastic Security**
More details to follow soon.

Elastic Netherlands User Group

Alfredo Tomio Jr

Rasim D

msingathi majola

Lloyd Drost

Barend Schut

Evgenii M.

Ketan Patel

Rômulo Farias

Akshat Hegde

Maksim Shevchenko

Oleksii Ustenko

Volodymyr S.

Rick van de Vaart

Riccardo Trivellato

kiran Nreddy

Nathan Deridder

Jasper Hieselaar

Ed Wijk

Hans Heerooms

Alert Fatigue Therapy: How to Write Detection Rules That Don't Suck

Elasticsearch, Inc.

Elastic

그룹

{PRO_NETWORK_NAME}은(는) Meetup 프로로서 전 세계 회원 수가 {PRO_MEMBER_COUNT}명 이상이며 Meetup이 {PRO_GROUP_COUNT}개에 달합니다. Meetup 프로는 사용자, 파트너, 기여자, 회원의 네트워크를 조직하고 소통할 수 있게 해주는 전문적인 툴입니다.

We’re delighted to have you join the Elastic global community!

This group is for anyone interested in making data usable in real-time and at scale for use cases like security, observability, enterprise search, and many more, using our Elasticsearch, Kibana, Logstash, and Beats products (https://www.elastic.co/products/).

Elastic

Elastic Fantastics

소개

예정된 이벤트

소개

그룹