(Doc+) Alerts UI cannot be CCS (#5513)

* (Doc+) Alerts UI cannot be CCS 👋 howdy, team! Playing forward a couple ballpark Githubs (kindly see their sub-internal-links) #4653 , elastic/kibana#172534 , can we expand [this doc's](https://www.elastic.co/guide/en/security/master/data-views-in-sec.html#_create_or_modify_a_data_view) note to more heavily indicate even CCS is not possible on the Alerts UI? * feedback Co-authored-by: Joe Peeples <[email protected]> --------- Co-authored-by: Joe Peeples <[email protected]> (cherry picked from commit 5c199b0)
elastic · Jul 17, 2024 · db9e223 · db9e223
1 parent 20a4125
commit db9e223
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/getting-started/data-views-in-sec.asciidoc b/docs/getting-started/data-views-in-sec.asciidoc
@@ -28,7 +28,7 @@ image::images/dataview-filter-example.gif[video showing how to filter the active
 
 This only allows you to add index patterns that match indices that currently contain data (other index patterns are unavailable). Note that any changes made are saved in the current browser window and won't persist if you open a new tab.
 
-NOTE: You cannot update the data view for the Alerts page. It always shows data from `.alerts-security.alerts-default`.
+NOTE: You cannot update the data view for the Alerts page. This includes referencing a cross-cluster search (CCS) data view or any other data view. The Alerts page always shows data from `.alerts-security.alerts-default`.
 
 [discrete]
 [[default-data-view-security]]