Skip to content

Commit 562cc22

Browse files
nastasha-solomonbenironside
authored andcommitted
More ESS changes
1 parent 8942d92 commit 562cc22

File tree

1 file changed

+15
-13
lines changed

1 file changed

+15
-13
lines changed

docs/advanced-entity-analytics/tune-anomaly-results.asciidoc

Lines changed: 15 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -16,12 +16,13 @@ you can filter out the unwanted results.
1616
For example, to filter out results from a housekeeping process, named
1717
`maintenanceservice.exe`, that only executes occasionally you need to:
1818

19-
. <<create-fiter-list>>
19+
. <<create-filter-list>>
2020
. <<add-job-filter>>
2121
. <<clone-job, Clone and rerun the job>> (optional)
2222

2323
[float]
24-
[[create-fiter-list]]
24+
[[create-filter-list]]
25+
//Make sure that fixing this typo doesn't affect any other references in the Security docset and elsewhere.
2526
=== Create a filter list
2627

2728
. Find **Machine Learning** in the navigation menu or by using the {kibana-ref}/introduction.html#kibana-navigation-search[global search field].
@@ -39,7 +40,7 @@ filter out anomaly results (`maintenanceservice.exe` in our example).
3940
image::filter-add-item.png[]
4041
.. Click *Add* and then *Save*.
4142

42-
The new filter appears on the Filter Lists page and can be added to relevant jobs.
43+
The new filter appears on the Filter Lists page, where you can add it to relevant jobs.
4344

4445
[float]
4546
[[add-job-filter]]
@@ -51,7 +52,7 @@ The new filter appears on the Filter Lists page and can be added to relevant job
5152
are not listed, click *Edit job selection* and select the relevant job.
5253
. In the *actions* column, click the gear icon and then select _Configure rules_.
5354
+
54-
The *Create Rule* window is displayed.
55+
The Create Rule window displays.
5556
+
5657
[role="screenshot"]
5758
image::rule-scope.png[]
@@ -65,8 +66,8 @@ example).
6566
TIP: For more information, see
6667
{ml-docs}/ml-configuring-detector-custom-rules.html[Customizing detectors with custom rules].
6768

68-
. Click *Save*.
69-
69+
. Click *Save* to save the filter to the job results.
70+
+
7071
NOTE: Changes to rules only affect new results. All anomalies found by the job
7172
before the filter was added are still displayed.
7273

@@ -96,18 +97,19 @@ name, such as `windows-rare-network-process-2`.
9697
+
9798
[role="screenshot"]
9899
image::cloned-job-details.png[]
99-
. Click *Next* and check the job validates without errors. You can ignore
100-
warnings about multiple influencers.
101-
. Click *Next* and then *Create job*.
100+
101+
. Click **Next** and confirm that the job doesn't return errors. You can ignore warnings about multiple influencers.
102+
. Click **Next**, then **Create job**.
102103
+
103-
The *Start <job name>* window is displayed.
104+
The *Start <job name>* window displays.
104105
+
105106
[role="screenshot"]
106107
image::start-job-window.png[]
107-
. Select the point of time from which the job will analyze anomalies.
108-
. Click *Start*.
108+
109+
. Specify when the job begins to analyze anomalies.
110+
. Click **Start**.
109111
+
110-
After a while, results will start to appear on the *Anomaly Explorer* page.
112+
Results will eventually appear on the Anomaly Explorer page.
111113

112114
[float]
113115
[[define-rule-threshold]]

0 commit comments

Comments
 (0)