Each level builds on the previous. Complete the labs, then answer the debrief quiz.
Core ES|QL syntax, filtering, aggregation. Start here.
LOOKUP JOIN, enrichment, threat intel, multi-stream queries.
CHANGE_POINT, FORK, risk scoring, SOC dashboards.
| Lab | Title | Score |
|---|
Enter your details to get started.
Already registered?