Elastic × Tines

Integrating Tines and Elastic enhances security operations by automating threat detection and response workflows, leveraging Elastic’s powerful search and analytics capabilities within Tines’ intuitive automation platform.

Elastic

Pre-built templates

With Tines, you can easily take any action that has a defined API. We’ve already pre-built some of the most popular ones for you, so you can build quickly.

Add a case comment or alert
Add case settings
Close cases
Create a case
Create an alerts index
Create Document in Elasticsearch
Create list data streams
Delete a case comment or alert
Delete a detection rule
Delete a list
Delete a list item
Delete all case comments and alerts
Delete an alerts index
Delete cases
Delete list data streams
Export detection rules
Filebeat SSH Attempts Query
Find and/or aggregate detection alerts
Find case activity
Find case comments and alerts

Build your own connections

With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.

cURL request

curl -v \ -X GET \ --location \ "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" \ -H 'Content-Type: application/json'

Paste in your Tines story

HTTP requestRequest toapi.nasa.gov

Full workflow examples

Explore pre-built workflows for Elastic. Use them for inspiration or as a starting point to build your custom automation solution.

Connect quickly

It takes minutes, not months, to connect to tools in Tines.

Explore more resources

Check out our blogs that mention Elastic, browse our learning paths, and more.

Built by you,
powered by Tines

Already have an account? Log in.