From e4d65c3b89a39873c7d8f868bdf5ac355cd1af7f Mon Sep 17 00:00:00 2001
From: natasha-moore-elastic
 <137783811+natasha-moore-elastic@users.noreply.github.com>
Date: Fri, 8 Sep 2023 19:41:21 +0100
Subject: [PATCH] Clarifies that `expire_time` is not available for endpoint
 exceptions (#3856)

* Clarifies that expire_time is not available for endpoint exceptions

* TW review updates

(cherry picked from commit 5182f161f1aa40c5384d3204494ae21c5583d63b)
---
 .../api/exceptions/api-create-exception-item.asciidoc           | 2 +-
 .../api/exceptions/api-update-exception-item.asciidoc           | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/detections/api/exceptions/api-create-exception-item.asciidoc b/docs/detections/api/exceptions/api-create-exception-item.asciidoc
index 3f2901c393..faa6d8192f 100644
--- a/docs/detections/api/exceptions/api-create-exception-item.asciidoc
+++ b/docs/detections/api/exceptions/api-create-exception-item.asciidoc
@@ -43,7 +43,7 @@ A JSON object with these fields:
 exception queries. Boolean `AND` logic is used to evaluate the relationship
 between array elements. If you want to use `OR` logic, create a separate
 exception item. |Yes
-|`expire_time` |String |An expiration date in ISO format. |No
+|`expire_time` |String |The exception item's expiration date, in ISO format. This field is only available for regular exception items, not endpoint exceptions. |No
 |`list_id` |String |ID of the associated <<exceptions-api-create-container, exception container>>. |Yes
 |`item_id` |String |Unique identifier of the exception item. |No, automatically
 created when it is not provided.
diff --git a/docs/detections/api/exceptions/api-update-exception-item.asciidoc b/docs/detections/api/exceptions/api-update-exception-item.asciidoc
index a4982ef2d6..f244edd525 100644
--- a/docs/detections/api/exceptions/api-update-exception-item.asciidoc
+++ b/docs/detections/api/exceptions/api-update-exception-item.asciidoc
@@ -26,7 +26,7 @@ When unspecified, a new comment is created.
 exception queries. Boolean `AND` logic is used to evaluate the relationship
 between array elements. If you want to use `OR` logic, create a separate
 exception item. |Yes
-|`expire_time` |String |An expiration date in ISO format. |No
+|`expire_time` |String |The exception item's expiration date, in ISO format. This field is only available for regular exception items, not endpoint exceptions. |No
 |`id` |String |The item's unique identifier. |Yes, when the item's `item_id` field is not used.
 |`item_id` |String |The `item_id` of the item you are updating. |Yes, when
 the item's `id` field is not used.