From 6dee111ac0d542d3f9f103b5bf307ae7b0dd3241 Mon Sep 17 00:00:00 2001 From: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com> Date: Thu, 27 Mar 2025 17:52:39 -0400 Subject: [PATCH] [8.18] Add a docs page about Detection-as-code rules management (#6656) * First draft * Moved locations * Update docs/detections/detection-engine-intro.asciidoc * Update docs/detections/detection-engine-intro.asciidoc Co-authored-by: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com> --------- Co-authored-by: Kseniia Ignatovych <40713348+approksiu@users.noreply.github.com> (cherry picked from commit 95095845ebbb7f342ca72ca1008cdaa0b0b9faa0) --- docs/detections/detection-engine-intro.asciidoc | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/docs/detections/detection-engine-intro.asciidoc b/docs/detections/detection-engine-intro.asciidoc index 5607e31dab..3c5f59304c 100644 --- a/docs/detections/detection-engine-intro.asciidoc +++ b/docs/detections/detection-engine-intro.asciidoc @@ -116,4 +116,14 @@ setting is not enabled in the `elasticsearch.yml` file. For more information, re [[detections-logsdb-index-mode]] == Using logsdb index mode -To learn how your rules and alerts are affected by using the {ref}/logs-data-stream.html[logsdb index mode], refer to <>. \ No newline at end of file +To learn how your rules and alerts are affected by using the {ref}/logs-data-stream.html[logsdb index mode], refer to <>. + +[discrete] +[[manage-rule-dac]] +=== Manage rules as code + +Utilize the https://dac-reference.readthedocs.io/en/latest/dac_concept_and_workflows.html[Detection-as-Code] (DaC) principles to externally manage your detection rules. + +The {elastic-sec} Labs team uses the https://github.com/elastic/detection-rules[detection-rules] repo to develop, test, and release {elastic-sec}'s <>. The repo provides DaC features and allows you to customize settings to simplify the setup for managing user rules with the DaCe pipeline. + +To get started, refer to the https://github.com/elastic/detection-rules/blob/main/README.md#detections-as-code-dac[DaC documentation]. \ No newline at end of file