diff --git a/docs/detections/alerts-view-details.asciidoc b/docs/detections/alerts-view-details.asciidoc index c739ce4798..2b4682f9ff 100644 --- a/docs/detections/alerts-view-details.asciidoc +++ b/docs/detections/alerts-view-details.asciidoc @@ -93,6 +93,8 @@ The About section has the following information: + NOTE: The event renderer only displays if an event renderer exists for the alert type. Fields are interactive; hover over them to access the available actions. +* **Last Alert Status Change**: Shows the last time the alert's status was changed, along with the user who changed it. + * **MITRE ATT&CK**: Provides relevant https://attack.mitre.org/[MITRE ATT&CK] framework tactics, techniques, and sub-techniques. [discrete] diff --git a/docs/detections/images/about-section-rp.png b/docs/detections/images/about-section-rp.png index ab6bcf5ea1..754cf1c0dd 100644 Binary files a/docs/detections/images/about-section-rp.png and b/docs/detections/images/about-section-rp.png differ diff --git a/docs/detections/images/alert-details-flyout-right-panel.png b/docs/detections/images/alert-details-flyout-right-panel.png index 005afb93e8..251d8d3536 100644 Binary files a/docs/detections/images/alert-details-flyout-right-panel.png and b/docs/detections/images/alert-details-flyout-right-panel.png differ diff --git a/docs/reference/alert-schema.asciidoc b/docs/reference/alert-schema.asciidoc index 558ffff60f..bee54009eb 100644 --- a/docs/reference/alert-schema.asciidoc +++ b/docs/reference/alert-schema.asciidoc @@ -124,6 +124,9 @@ Type: keyword Type: long |`signal.status` |`kibana.alert.workflow_status`| Type: keyword +|N/A |`kibana.alert.workflow_status_updated_at`| The timestamp of when the alert's status was last updated. + +Type: date |`signal.threshold_result.*`|`kibana.alert.threshold_result.*`| Type: object |`signal.group.id` |`kibana.alert.group.id`| Type: keyword |`signal.group.index` |`kibana.alert.group.index`| Type: integer