Anass Chaoui

Participation in a strategic cybersecurity project aimed at migrating from Splunk to Elastic Stack:

• Realization of a POC for logging, observability, and alerting

• Design and implementation of the Elastic architecture (90 Nodes)

• Deployment and configuration of Logstash pipelines (15000 Events/s)

• Deployment and management of Beats agents

• Complete automation of the deployment, maintenance, and update chain using Ansible and Ansible Tower

• Implementation of monitoring and backup clusters

• Configuration of authorizations and access management (RBAC, mappings)

• Support and guidance for internal teams in adopting Elastic best practices

As part of strengthening the Elastic team, I joined the System Logs division with the following objectives:

• Migration from

• Beats Creation

• Optimization / Search

• Cluster Deployment

• Encryption

• Monitoring with Kibana alerting and watchers

As part of a cybersecurity project for the AG2R group, I was responsible for setting up the Elastic infrastructure to host a SOC SIEM project.