Skip to content

[UI copy]: Retain risk scores configuration setting #3416

@jaredburgettelastic

Description

@jaredburgettelastic

Description

The Entity Analytics Risk scoring feature now includes a new configuration setting that allows entity risk scores to automatically "reset" back to zero in situations where there are no new inputs found for that entity.

There is a small amount of in-product copy for the checkbox's label and tooltip which we'd like feedback/input for this feature.

Related links / assets

This copy can be found here, but also pasting inline below:

[checkbox label] Retain previously calculated risk scores

[tooltip] When checked, entities will retain their most recently computed risk score indefinitely until a new input (e.g., alert) causes the score to be recalculated. If unchecked, risk scores are reset to zero when no inputs are found.

Which product area does this mainly concern?

Security solution

Collaborators

PM: Erik Huang
Engineering: @tiansivive @jaredburgettelastic
Documentation: @natasha-moore-elastic

Timeline / deliverables

Ideally before the final 9.2 BC October 16th, but if no drastic issues are found any time soon after.

Metadata

Metadata

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions