Skip to content

Commit 9ee6bcc

Browse files
Minor tweaks
1 parent 7ef02d6 commit 9ee6bcc

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

serverless/serverless-changelog.asciidoc

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ For serverless changes in Cloud Console, refer to https://www.elastic.co/guide/e
1515

1616
// tag::known-issue[201820]
1717
[discrete]
18-
.The **Exceptions** tab won't properly load if exceptions contain comments with the newline character (`\n`)
18+
. In {sec-serverless}, the **Exceptions** tab won't properly load if exceptions contain comments with newline characters (`\n`)
1919
[%collapsible]
2020
====
2121
*Details* +
@@ -25,14 +25,14 @@ On December 5, 2024, it was discovered that the **Exceptions** tab will not load
2525
2626
For custom rules:
2727
28-
. From the {security-app}, <<import-export-rules-ui,export>> the rule or rules with the affected exception lists.
28+
. From your {sec-serverless} project, <<import-export-rules-ui,export>> the rule or rules with the affected exception lists.
2929
. Modify the `.ndjson` file so `comments` no longer contain newline characters.
30-
. Return to the {security-app} and <<import-export-rules-ui,re-import>> the rules. Make sure to select the **Overwrite existing exception lists with conflicting "list_id"** option.
30+
. Return to your project and <<import-export-rules-ui,re-import>> the rules. Make sure to select the **Overwrite existing exception lists with conflicting "list_id"** option.
3131
3232
For prebuilt rules:
3333
3434
. Fetch the affected exception list ID or IDs that are associated with the rule.
35-
.. Find the affected rule's ID (`id`). From the {security-app}, open rule's details page, go to the page's URL, and copy the string at the end. For example, the string `167a5f6f-2148-4792-8226-b5e7a58ef46e` at the end of the URL http://host.name/app/security/rules/id/167a5f6f-2148-4792-8226-b5e7a58ef46e is a rule `id`.
35+
.. Find the affected rule's ID (`id`). From your {sec-serverless} project, open the rule's details page, go to the page URL, and copy the string at the end. For example, the URL http://host.name/app/security/rules/id/167a5f6f-2148-4792-8226-b5e7a58ef46e contains the `id` `167a5f6f-2148-4792-8226-b5e7a58ef46e` at the end.
3636
.. Use the `id` to fetch the rule's details using the {api-kibana}/operation/operation-readrule[Retrieve a detection rule API]. Here is an example request that includes the rule ID:
3737
+
3838
[source,console]
@@ -64,7 +64,7 @@ curl -XPOST -u elastic:changeme -H 'kbn-xsrf: true' -H 'elastic-api-version: 202
6464
----
6565
+
6666
. Modify the exception list's `.ndjson` file to ensure that no `comments[].comment` values contain newline characters (`\n`).
67-
. From the {security-app}, re-import the modified exception list using **Import exception lists** option on the **Shared Exception Lists** page (find the page in the navigation menu or by using the {kibana-ref}/introduction.html#kibana-navigation-search[global search field]).
67+
. From your {sec-serverless} project, re-import the modified exception list using **Import exception lists** option on the **Shared Exception Lists** page (find the page in the navigation menu or by using the {kibana-ref}/introduction.html#kibana-navigation-search[global search field]).
6868
+
6969
The import will initially fail because the exception list already exists. After the failure, an option to overwrite the existing list appears. Select the option, then resubmit the request to import the updated exception list.
7070
====

0 commit comments

Comments
 (0)