@@ -16,12 +16,13 @@ you can filter out the unwanted results.
1616For example, to filter out results from a housekeeping process, named
1717`maintenanceservice.exe`, that only executes occasionally you need to:
1818
19- . <<create-fiter -list>>
19+ . <<create-filter -list>>
2020. <<add-job-filter>>
2121. <<clone-job, Clone and rerun the job>> (optional)
2222
2323[float]
24- [[create-fiter-list]]
24+ [[create-filter-list]]
25+ //Make sure that fixing this typo doesn't affect any other references in the Security docset and elsewhere.
2526=== Create a filter list
2627
2728. Find **Machine Learning** in the navigation menu or by using the {kibana-ref}/introduction.html#kibana-navigation-search[global search field].
@@ -39,7 +40,7 @@ filter out anomaly results (`maintenanceservice.exe` in our example).
3940image::filter-add-item.png[]
4041.. Click *Add* and then *Save*.
4142
42- The new filter appears on the Filter Lists page and can be added to relevant jobs.
43+ The new filter appears on the Filter Lists page, where you can add it to relevant jobs.
4344
4445[float]
4546[[add-job-filter]]
@@ -51,7 +52,7 @@ The new filter appears on the Filter Lists page and can be added to relevant job
5152are not listed, click *Edit job selection* and select the relevant job.
5253. In the *actions* column, click the gear icon and then select _Configure rules_.
5354+
54- The * Create Rule* window is displayed .
55+ The Create Rule window displays .
5556+
5657[role="screenshot"]
5758image::rule-scope.png[]
@@ -65,8 +66,8 @@ example).
6566TIP: For more information, see
6667{ml-docs}/ml-configuring-detector-custom-rules.html[Customizing detectors with custom rules].
6768
68- . Click *Save*.
69-
69+ . Click *Save* to save the filter to the job results .
70+ +
7071NOTE: Changes to rules only affect new results. All anomalies found by the job
7172before the filter was added are still displayed.
7273
@@ -96,18 +97,19 @@ name, such as `windows-rare-network-process-2`.
9697+
9798[role="screenshot"]
9899image::cloned-job-details.png[]
99- . Click *Next* and check the job validates without errors. You can ignore
100- warnings about multiple influencers.
101- . Click *Next* and then *Create job*.
100+
101+ . Click **Next** and confirm that the job doesn't return errors. You can ignore warnings about multiple influencers.
102+ . Click ** Next**, then ** Create job* *.
102103+
103- The *Start <job name>* window is displayed .
104+ The *Start <job name>* window displays .
104105+
105106[role="screenshot"]
106107image::start-job-window.png[]
107- . Select the point of time from which the job will analyze anomalies.
108- . Click *Start*.
108+
109+ . Specify when the job begins to analyze anomalies.
110+ . Click **Start**.
109111+
110- After a while, results will start to appear on the * Anomaly Explorer* page.
112+ Results will eventually appear on the Anomaly Explorer page.
111113
112114[float]
113115[[define-rule-threshold]]
0 commit comments