Skip to content

Commit 2b59967

Browse files
[8.18] CCS and ES|QL rule reqs (#6640) (#6647)
* First draft * fix title * Tweaks * List format * Update docs/detections/rules-cross-cluster-search.asciidoc Co-authored-by: Benjamin Ironside Goldstein <[email protected]> --------- Co-authored-by: Benjamin Ironside Goldstein <[email protected]> (cherry picked from commit cff400b) Co-authored-by: Nastasha Solomon <[email protected]>
1 parent 9f0124c commit 2b59967

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

docs/detections/rules-cross-cluster-search.asciidoc

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,15 @@
33

44
{ref}/modules-cross-cluster-search.html[Cross-cluster search] is an {es} feature that allows one cluster (the _local_ cluster) to query data in a separate cluster (the _remote_ cluster). {elastic-sec}'s detection rules can perform a cross-cluster search to query data in remote clusters.
55

6+
.Requirements
7+
[sidebar]
8+
--
9+
10+
* To learn about the requirements for using cross-cluster search, refer to {ref}/modules-cross-cluster-search.html[Search across clusters].
11+
* Using cross-cluster search for {esql} rules requires an (https://www.elastic.co/pricing)[Enterprise subscription].
12+
13+
--
14+
615
[discrete]
716
[[set-up-ccs-rules]]
817
=== Set up cross-cluster search in detection rules

0 commit comments

Comments
 (0)