Skip to content

Commit

Permalink
[Request][Detection Engine][ESS][8.14] GA-ing alert suppression for c…
Browse files Browse the repository at this point in the history
…ustom query rule (#5114)

* Updates tech preview text

* Removing tag from custom query rule

* Reverting change to lang

Suppression page has the updated tech preview label lang. No need to change it elsewhere.

* Update docs/detections/rules-ui-create.asciidoc

Co-authored-by: Joe Peeples <[email protected]>

* Update docs/detections/rules-ui-create.asciidoc

Co-authored-by: Joe Peeples <[email protected]>

---------

Co-authored-by: Joe Peeples <[email protected]>
  • Loading branch information
nastasha-solomon and joepeeples authored Apr 30, 2024
1 parent 2fd85dd commit 0d835e1
Show file tree
Hide file tree
Showing 4 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion docs/detections/alert-suppression.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
--
Alert suppression requires a https://www.elastic.co/pricing[Platinum or higher subscription].

preview::[]
preview::["Alert suppression is in technical preview for threshold, indicator match, event correlation, and new terms rules. The functionality may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features."]
--

Alert suppression allows you to reduce the number of repeated or duplicate detection alerts created by these detection rule types:
Expand Down
2 changes: 1 addition & 1 deletion docs/detections/api/rules/rules-api-create.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -493,7 +493,7 @@ a detection rule exception (`detection`) or an endpoint exception (`endpoint`).
[[opt-fields-alert-suppression-create]]
===== Optional alert suppression fields for query, indicator match, threshold, event correlation (non-sequence queries only), and new terms rules

preview::[]
preview::["Alert suppression is in technical preview for threshold, indicator match, event correlation, and new terms rules. The functionality may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features."]

====== Query, indicator match, event correlation (non-sequence queries only), and new terms rules

Expand Down
2 changes: 1 addition & 1 deletion docs/detections/api/rules/rules-api-update.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -518,7 +518,7 @@ in the UI (*Rules* -> *Detection rules (SIEM)* -> *_Rule name_*).
[[opt-fields-alert-suppression-update]]
===== Optional alert suppression fields for query, indicator match, threshold, event correlation (non-sequence queries only), and new terms rules

preview::[]
preview::["Alert suppression is in technical preview for threshold, indicator match, event correlation, and new terms rules. The functionality may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features."]

====== Query, indicator match, event correlation (non-sequence queries only), and new terms rules

Expand Down
2 changes: 1 addition & 1 deletion docs/detections/rules-ui-create.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ When you use a saved query, the *Load saved query "_query name_" dynamically on

* Deselect this to load the saved query as a one-time way of populating the rule's *Custom query* field and filters. This copies the settings from the saved query to the rule, so you can then further adjust the rule's query and filters as needed. If the saved query is later changed, the rule will not inherit those changes.

. preview:[] (Optional, https://www.elastic.co/pricing[Platinum or higher subscription] required) Use *Suppress alerts by* to reduce the number of repeated or duplicate alerts created by the rule. Refer to <<alert-suppression>> for more information.
. (Optional, https://www.elastic.co/pricing[Platinum or higher subscription] required) Use *Suppress alerts by* to reduce the number of repeated or duplicate alerts created by the rule. Refer to <<alert-suppression>> for more information.

. Click **Continue** to <<rule-ui-basic-params, configure basic rule settings>>.

Expand Down

0 comments on commit 0d835e1

Please sign in to comment.