One SOC can triage alerts across 100 linked projects with Elastic Cloud Serverless CPS, keeping tenant data isolated while running about 2,100 detection rules from a single origin. #ElasticSecurity #CrossProjectSearch #ESQL
Centralized Alert Triage: One SOC, 100 Linked Projects
Elastic Cloud Serverless Cross-project search (CPS) lets one Elastic Security origin project run detection, triage, investigation, and response workflows across linked projects while keeping each tenant’s data isolated. In testing, a single origin handled about 2,100 prebuilt detection rules across 100 linked projects, with ES|QL guidance, operational limits, and clear boundaries on what CPS can and cannot do. #ElasticCloudServerless #ElasticSecurity #CrossProjectSearch #ES|QL
www.hendryadrian.com
September 20, 2026 at 12:15 AM
One SOC can triage alerts across 100 linked projects with Elastic Cloud Serverless CPS, keeping tenant data isolated while running about 2,100 detection rules from a single origin. #ElasticSecurity #CrossProjectSearch #ESQL