diff --git a/solutions/security/detect-and-alert/about-building-block-rules.md b/solutions/security/detect-and-alert/about-building-block-rules.md index b629543486..f141d9f2ef 100644 --- a/solutions/security/detect-and-alert/about-building-block-rules.md +++ b/solutions/security/detect-and-alert/about-building-block-rules.md @@ -18,6 +18,10 @@ Create building block rules when you do not want to see their generated alerts i * A record of low-risk alerts without producing noise in the Alerts table. * Rules that execute on the alert indices (`.alerts-security.alerts-`). You can then use building block rules to create hidden alerts that act as a basis for an *ordinary* rule to generate visible alerts. +::::{tip} +Add [rule notifications](/solutions/security/detect-and-alert/create-detection-rule.md#rule-notifications) to building block rules to notify you when building block alerts are generated. +:::: + ## Set up rules that run on alert indices [security-building-block-rules-set-up-rules-that-run-on-alert-indices]