From ffe3b63dbe7194583a0aefec1087cfe69084779d Mon Sep 17 00:00:00 2001 From: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com> Date: Tue, 12 Mar 2024 15:44:40 -0400 Subject: [PATCH] Update docs/detections/alert-suppression.asciidoc Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com> --- docs/detections/alert-suppression.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/detections/alert-suppression.asciidoc b/docs/detections/alert-suppression.asciidoc index b44168a251..21cac47320 100644 --- a/docs/detections/alert-suppression.asciidoc +++ b/docs/detections/alert-suppression.asciidoc @@ -101,5 +101,5 @@ image::images/timeline-button.png[Investigate in timeline button, 200] Some rule types have a maximum number of alerts that can be suppressed (custom query rules don't have a suppression limit): -* **Threshold** - The maximum number of is the value specified for the <> setting, which is `100` by default. +* **Threshold** - The maximum number of alerts is the value specified for the <> setting, which is `100` by default. * **Indicator match** - The maximum number is five times the value specified for the <> setting. The default `max_signals` value is `100`, which means the default maximum limit for indicator match rules is `500`. \ No newline at end of file