Skip to content

Commit

Permalink
Moved note down
Browse files Browse the repository at this point in the history
  • Loading branch information
nastasha-solomon committed Feb 19, 2024
1 parent 4d78e77 commit 71fbb0c
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docs/detections/add-exceptions.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -67,8 +67,6 @@ IMPORTANT: Rule exceptions are case-sensitive, which means that any character th
NOTE: When you create a new exception from an alert, exception conditions are auto-populated with relevant alert data. Data from custom highlighted fields is listed first. A comment that describes the auto-generated exception conditions is also added to the **Add comments** section.

.. *Field*: Select a field to identify the event being filtered.
+
IMPORTANT: Rule exceptions are case-sensitive, which means that any character that's entered as an uppercase or lowercase letter will be treated as such. In the event you _don't_ want a field evaluated as case-sensitive, some ECS fields have a `.caseless` version that you can use.
+
[NOTE]
=======
Expand Down Expand Up @@ -181,6 +179,8 @@ The *Add Endpoint Exception* flyout opens.
image::images/endpoint-add-exp.png[]

. If required, modify the conditions.
+
IMPORTANT: Rule exceptions are case-sensitive, which means that any character that's entered as an uppercase or lowercase letter will be treated as such. In the event you _don't_ want a field evaluated as case-sensitive, some ECS fields have a `.caseless` version that you can use.
+
[NOTE]
======
Expand Down

0 comments on commit 71fbb0c

Please sign in to comment.