[8.12] [Request][ESS] Expand requirements for Osquery actions (backport

#4663) (#4686) (cherry picked from commit 8ba39b4) Co-authored-by: Nastasha Solomon <[email protected]>
elastic · Jan 26, 2024 · 96f153c · 96f153c
1 parent 013ef66
commit 96f153c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/docs/osquery/osquery-response-action.asciidoc b/docs/osquery/osquery-response-action.asciidoc
@@ -16,6 +16,7 @@ Osquery Response Actions allow you to add live queries to custom query rules so
 * The {kibana-ref}/manage-osquery-integration.html[Osquery manager integration] must be installed.
 * {agent}'s {fleet-guide}/monitor-elastic-agent.html[status] must be `Healthy`. Refer to {fleet-guide}/fleet-troubleshooting.html[{fleet} Troubleshooting] if it isn't.
 * Your role must have {kibana-ref}/osquery.html[Osquery feature privileges].
+* You can only add Osquery Response Actions to custom query rules.
 --
 
 [role="screenshot"]