Skip to content

Commit 2ca0821

Browse files
committed
Incorporates Charles' review
1 parent 517399d commit 2ca0821

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

solutions/security/get-started/automatic-migration.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ applies_to:
77

88
# Automatic migration
99

10-
Automatic Migration for detection rules helps you quickly migrate Splunk assets to {{elastic-sec}}. The following asset types are supported:
10+
Automatic Migration helps you quickly migrate Splunk assets to {{elastic-sec}}. The following asset types are supported:
1111

1212
* {applies_to}`stack: preview 9.0, ga 9.1` {applies_to}`serverless: ga` Splunk rules
1313
* {applies_to}`stack: preview 9.2` {applies_to}`serverless: preview` Splunk dashboards
@@ -56,7 +56,7 @@ You can ingest your data before migrating your assets, or migrate your assets fi
5656

5757
6. After you upload your Splunk assets, Automatic Migration will detect whether they use any macros or lookups. If so, follow the instructions which appear to export and upload them. Alternatively, you can complete this step later — however, until you upload them, some of your migrated assets will have a `partially translated` status. If you upload them now, you don't have to wait on this page for them to be processed — a notification will appear when processing is complete.
5858

59-
7. Click **Translate** to start the rule translation process. The **Start rules migration** popup appears. Use the dropdown menu to select which AI connector to use. For rule migrations there is a **Match to Elastic prebuilt rules** option, which is enabled by default; when it's enabled, any rules you translate that are similar to Elastic prebuilt rules are converted to those prebuilt rules. When it's disabled, each of your rules will be converted into a new custom rule.
59+
7. Click **Translate** to start the rule translation process. The **Start rules migration** popup appears. Use the dropdown menu to select which AI connector to use. For rule migrations there is a **Match to Elastic prebuilt rules** option, which is enabled by default; when it's enabled, any migrated rules that are similar to an Elastic prebuilt rule are converted to those prebuilt rules (this uses fewer tokens). When it's disabled, each of your rules will be converted into a new custom rule.
6060
8. Click **Translate**. A name for the migration is automatically created, and you can track its progress on this page. The **More actions** ({icon}`boxes_vertical`) button lets you rename or delete the migration.
6161

6262
::::{image} /solutions/images/security-siem-migration-rule-status-more-actions.png
@@ -163,14 +163,14 @@ This section describes the **Translated dashboards** page's interface and the da
163163
The table's fields are as follows:
164164

165165
* **Name:** The names of the translated dashboards cannot be edited until after installation.
166-
* **Updated:** The migration date.
166+
* **Updated:** The date when the source dashboard was last modified.
167167
* **Status:** The dashboard's translation status:
168-
* `Installed`: Already added to {{elastic-sec}}. Click **View** to manage and enable it.
168+
* `Installed`: Already added to {{elastic-sec}}. Click **View** to manage it.
169169
* `Translated`: Ready to install. Click **Install** to install it.
170170
* `Partially translated`: Part of the dashboard could not be translated. Upload any missing macros or lookups, or fix broken syntax.
171171
* `Not translated`: None of the original dashboard could be translated.
172172
* `Failed`: Translation failed. Click the dashboard's name to open the details flyout and view error details.
173-
* **Tags:** The dashboard's tags, which can be used to identify it on the **Dashboards** page. You can edit these after installing the dashboard.
173+
* **Tags:** The dashboard's tags, which identify it's source application, and can be used to identify it on the **Dashboards** page.
174174
* **Actions:** To view an `Installed` dashboard, click **View**. To install a `Translated` dashboard, click **Install**. To reprocess a `Failed` dashboard, click **Reprocess**.
175175

176176
::::{note}
@@ -179,7 +179,7 @@ To view an explanation of the logic behind how each dashboard was translated, cl
179179

180180
### Finalize translated dashboards
181181

182-
Once you're on the **Translated rules** or **Translated dashboards** page, to install any assets that were partially translated or not translated, you will need to edit them. Optionally, you can also edit assets that were successfully translated to finetune them. For more information about editing dashboards, refer to [Building dashboards](/explore-analyze/dashboards/building.md).
182+
Once you're on the **Translated dashboards** page, to install any assets that were partially translated, you will need to edit them. Optionally, you can also edit assets that were successfully translated to finetune them. For more information about editing dashboards, refer to [Building dashboards](/explore-analyze/dashboards/building.md).
183183

184184
## Frequently asked questions (FAQ)
185185

0 commit comments

Comments
 (0)