[Security][9.2 & Serverless]: New advanced setting that controls suppression window behavior #2735
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
🔍 Preview links for changed docs |
approksiu
requested changes
Aug 28, 2025
solutions/security/detect-and-alert/suppress-detection-alerts.md
Outdated
Show resolved
Hide resolved
solutions/security/detect-and-alert/suppress-detection-alerts.md
Outdated
Show resolved
Hide resolved
solutions/security/detect-and-alert/suppress-detection-alerts.md
Outdated
Show resolved
Hide resolved
solutions/security/detect-and-alert/suppress-detection-alerts.md
Outdated
Show resolved
Hide resolved
solutions/security/detect-and-alert/suppress-detection-alerts.md
Outdated
Show resolved
Hide resolved
solutions/security/detect-and-alert/suppress-detection-alerts.md
Outdated
Show resolved
Hide resolved
solutions/security/detect-and-alert/suppress-detection-alerts.md
Outdated
Show resolved
Hide resolved
…/github.com/elastic/docs-content into issue-2526-suppression-adv-setting-9.2-serv
…/github.com/elastic/docs-content into issue-2526-suppression-adv-setting-9.2-serv
nastasha-solomon
changed the title
Contributor
Author
|
Checked the Serverless prod project and verified the advanced setting was available. Merging PR now. |
nastasha-solomon
deleted the
issue-2526-suppression-adv-setting-9.2-serv
branch
rhr323
pushed a commit
to rhr323/docs-content
that referenced
this pull request
Oct 27, 2025
…ression window behavior (elastic#2735) NOTE TO SELF (09/10/25): Sync with @denar50 about feature flag when I'm back. Contributes to elastic#2526 by documenting the new `securitySolution:suppressionBehaviorOnAlertClosure` advanced setting. [(preview)](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/2735/solutions/security/get-started/configure-advanced-settings#suppression-window-behavior) Also made the following changes: - Moved pre-reqs for using alert suppression to the section that has instructions for using it. This placement seems more appropriate. Also made light revisions to wordy steps. ([preview](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/2735/solutions/security/detect-and-alert/suppress-detection-alerts#security-alert-suppression-configure-alert-suppression)) - Moved that giant note about suppressing fields with multiple values to a dedicated section with the goal of streamlining the instructions for configuring suppression. [(preview)](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/2735/solutions/security/detect-and-alert/suppress-detection-alerts#security-alert-suppression-fields-with-multiple-values) - Added a new section that explained the impact of closing alerts that were generated by alert suppression. [(preview)](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/2735/solutions/security/detect-and-alert/suppress-detection-alerts#security-alert-suppression-impact-close-alerts) - Resized a few images that looked disproportionately large. **NOTE:** Made the same content improvements to the 8.x suppression docs in elastic/security-docs#7083 --------- Co-authored-by: Mike Birnstiehl <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
NOTE TO SELF (09/10/25): Sync with @denar50 about feature flag when I'm back.
Contributes to #2526 by documenting the new
securitySolution:suppressionBehaviorOnAlertClosureadvanced setting. (preview)Also made the following changes:
NOTE: Made the same content improvements to the 8.x suppression docs in elastic/security-docs#7083