[BUG] Outdated information mentioned in the step 5 for Osquery.

[sukhwindersingh-qasource]

Documentation links

https://www.elastic.co/guide/en/security/current/alerts-run-osquery.html

Description

• Outdated information mentioned in the step 5 for Osquery timeout field, As for now it got timed out as per the value we fill in the timeout field.

Screen

shot

Which documentation set(s) does this bug apply to?

ESS only

Release version

This bug applies to the stack version 8.12.0

[muskangulati-qasource]

Reviewed and assigned to @jmikell821

[nastasha-solomon]

@szwarckonrad the following question will likely spawn a separate doc update if needed:
Do you happen to know if the 5-minute timeout period was the default setting for live Osquery queries before 8.12? I checked the Kibana docs, and in versions 8.4-8.11, we tell users that queries will automatically timeout if there have been no responses after 5 minutes. For reference, see the second sentence in step 6 here.

cc: @natasha-moore-elastic

[nastasha-solomon]

Thanks for the review, @sukhwindersingh-qasource! The docs are ready for review at #4658 when you have a chance.

[nastasha-solomon]

Docs updated so closing this issue. Will follow up on this separately.