Skip to content

Commit 9a8e566

Browse files
Update solutions/security/detect-and-alert/add-manage-exceptions.md
1 parent 1b2e505 commit 9a8e566

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

solutions/security/detect-and-alert/add-manage-exceptions.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -79,8 +79,7 @@ You can add exceptions to a rule from the rule details page, the Alerts table, t
7979
::::
8080
8181
::::{note}
82-
When using ES|QL, it is possible to append new fields with commands such as eval. It is NOT possible to apply exceptions to these appended fields. The excpetions are only applied to the index source fields.
83-
* eval - https://www.elastic.co/docs/reference/query-languages/esql/commands/eval
82+
When using ES|QL, you can append new fields with commands such as [`EVAL`](https://www.elastic.co/docs/reference/query-languages/esql/commands/eval), but you can't apply exceptions to these appended fields. Exceptions are only applied to the index source fields.
8483
::::
8584
8685
1. **Field**: Select a field to identify the event being filtered.

0 commit comments

Comments
 (0)