Skip to content

Commit ded30ad

Browse files
authored
Update Status in scheduled-rules-overview.md
1 parent a2137e7 commit ded30ad

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/sentinel/scheduled-rules-overview.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -72,8 +72,8 @@ The MITRE ATT&CK tactics and techniques defined here in the rule apply to any al
7272

7373
For more information on maximizing your coverage of the MITRE ATT&CK threat landscape, see [Understand security coverage by the MITRE ATT&CK® framework](mitre-coverage.md).
7474

75-
**Status:** When you create the rule, its **Status** is **Enabled** by default, which means it will run immediately after you finish creating it. If you don’t want it to run immediately, you have two options:
76-
- Select **Disabled**, and the rule will be added to your **Active rules** tab. You can enable it from there when you need it.
75+
**Status:** When you create the rule, its **Status** is **Enabled** by default, which means it runs immediately after you finish creating it. If you don’t want it to run immediately, you have two options:
76+
- Select **Disabled**, and the rule is created without running. When you want the rule to run, find it in your **Active rules** tab, and enable it from there.
7777
- Schedule the rule to first run at a specific date and time. This method is currently in PREVIEW. See [Query scheduling](#query-scheduling) later on in this article.
7878

7979
### Rule query

0 commit comments

Comments
 (0)