From f59814f7ececf630563297b1e5d9f91fb27d188e Mon Sep 17 00:00:00 2001 From: Nastasha Solomon Date: Thu, 21 Aug 2025 09:56:34 -0400 Subject: [PATCH] fix! --- release-notes/elastic-cloud-serverless/known-issues.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/release-notes/elastic-cloud-serverless/known-issues.md b/release-notes/elastic-cloud-serverless/known-issues.md index 85f7491306..f5f2ce6dd6 100644 --- a/release-notes/elastic-cloud-serverless/known-issues.md +++ b/release-notes/elastic-cloud-serverless/known-issues.md @@ -51,7 +51,7 @@ After you complete this step, risk scores should automatically begin to successf ## Resolved -:::{dropdown} In {{sec-serverless}}, installing an {{elastic-defend}} integration or a new agent policy upgrades installed prebuilt rules, reverting user customizations and overwriting user-added actions and exceptions +:::{dropdown} Installing the {{elastic-defend}} integration or a new agent policy in {{sec-serverless}} forces an upgrade of prebuilt rules On April 10, 2025, it was discovered that when you install a new {{elastic-defend}} integration or agent policy, the installed prebuilt detection rules upgrade to their latest versions (if any new versions are available). The upgraded rules lose any user-added rule actions, exceptions, and customizations.