Value report
Serverless Security Stack
The Value report page estimates your savings from using Elastic's AI SOC features for alert triage, in terms of Analyst time saved and Cost Savings. The message at the top of the page explains how those numbers were determined, and how many alerts were Escalated and Filtered by AI.
You can interact with the page in the following ways:
- Update the time range: Use the time selector in the upper right corner to select the time range for which to show value metrics.
- Export report: Select Export report in the upper right corner to download a sharable PDF of the value report.
Serverless Stack
To access the Value report page, your subscription must include AI-powered features. For Elastic Security Serverless, this means you need either the Elastic AI SOC Engine (EASE) or Security Analytics Complete feature tier.
To access the Value report page, you need the SOC Management Security sub-feature Kibana privilege.

The following default roles have the SOC Management privilege by default:
- EASE feature tier:
_search_ai_lake_soc_manager - Security Analytics Complete:
adminandsoc_manager