Skip to content

Commit 45c7161

Browse files
mergify[bot]nastasha-solomongithub-actions[bot]
authored
[8.16] [Serverless][8.17][8.16]: Security – Alerts section bugs (backport #6240) (#6373)
* [Serverless][8.17][8.16]: Security – Alerts section bugs (#6240) * First draft * Update docs/detections/alerts-reduce.asciidoc * Removes outdated content * more changes * Removes docs for the enableCcsWarning setting * Oops - readds sections (cherry picked from commit 0cec577) # Conflicts: # docs/serverless/alerts/alerts-ui-manage.asciidoc # docs/serverless/alerts/reduce-notifications-alerts.asciidoc # docs/serverless/alerts/view-alert-details.asciidoc # docs/serverless/images/view-alert-details/-detections-about-section-rp.png * Delete docs/serverless directory and its contents --------- Co-authored-by: Nastasha Solomon <[email protected]> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 144fead commit 45c7161

File tree

4 files changed

+3
-7
lines changed

4 files changed

+3
-7
lines changed

docs/detections/alerts-reduce.asciidoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
| <<snooze-rule-actions,Rule action snoozing>>
1010
a| *_Stops a specific rule's notification actions from running_*.
1111

12-
Use to avoid unnecessary notifications from a specific rule. The rule continues to run and generate alerts during the snooze period, but its <<rule-notifications,notification actions>> don't run.
12+
Use to avoid unnecessary notifications from a specific rule. The rule continues to run and generate alerts during the snooze period, but its <<rule-response-action,notification actions>> don't run.
1313

1414
| {kibana-ref}/maintenance-windows.html[Maintenance window]
1515
a| *_Prevents all rules' notification actions from running_*.

docs/detections/alerts-ui-manage.asciidoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ The Alerts page offers various ways for you to organize and triage detection ale
2222
[role="screenshot"]
2323
image::images/view-alert-details.png[View details button, 200]
2424

25-
* View the rule that created an alert. Click a name in the *Rule* column to open the rule's details page.
25+
* View the rule that created an alert. Click a name in the *Rule* column to open the rule's details.
2626

2727
* View the details of the host and user associated with the alert. In the Alerts table, click a host name to open the <<host-details-flyout, host details flyout>>, or a user name to open the <<user-details-flyout, user details flyout>>.
2828

@@ -115,7 +115,7 @@ image::images/group-alerts-expand.png[Expanded alert group with alerts table]
115115
Use the toolbar buttons in the upper-left of the Alerts table to customize the columns you want displayed:
116116

117117
* **Columns**: Reorder the columns.
118-
* **_x_ fields sorted**: Sort the table by one or more columns.
118+
* **Sort fields _x_**: Sort the table by one or more columns.
119119
* **Fields**: Select the fields to display in the table. You can also add <<runtime-fields, runtime fields>> to detection alerts and display them in the Alerts table.
120120

121121
Click the *Full screen* button in the upper-right to view the table in full-screen mode.

docs/detections/alerts-view-details.asciidoc

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -94,10 +94,6 @@ The About section has the following information:
9494
+
9595
NOTE: The event renderer only displays if an event renderer exists for the alert type. Fields are interactive; hover over them to access the available actions.
9696

97-
* **Last alert status change**: Shows the last time the alert's status was changed, along with the user who changed it.
98-
99-
* **MITRE ATT&CK**: Provides relevant https://attack.mitre.org/[MITRE ATT&CK] framework tactics, techniques, and sub-techniques.
100-
10197
[discrete]
10298
[[investigation-section]]
10399
== Investigation
-31.5 KB
Loading

0 commit comments

Comments
 (0)