Security Operations - Elasticsearch Sightings Search flow is the Elasticsearch implementation launched by the Security Operations Integration - Sightings Search flow.

Role required: sn_si.analyst
Figure 1. Elasticsearch Sightings Search
Flow Designer for Security Operations - Elasticsearch Sightings Search
Activities specific to this flow are described here. For more information on other activities, see Common Security Operations integration flows and orchestration Flow Actions.