The importance of normalizing your security data to ECS
Senior Product Manager
Senior Software Engineer
The Elastic Common Schema (ECS) can be used for SIEM, logging, APM, and more. See the different paths to adopting ECS for security and why data normalization is so critical. Learn how to map custom sources so they can be used by Elastic Security and how to implement custom pipelines that may require additional fields. We'll provide concrete examples and give pointers to relevant resources to help you get going.