[Request][Serverless][ESS] EQL Sequence alert suppression #5886
Labels
Docset: ESS
Issues that apply to docs in the Stack release
Docset: Serverless
Issues for Serverless Security
Effort: Small
Issues that can be resolved quickly
Feature: Rules
Priority: High
Issues that are time-sensitive and/or are of high customer importance
Team: Detection Engine
Description
Alert suppression is now supported for EQL rules using sequence queries.
Background & resources
Which documentation set does this change impact?
ESS and serverless
ESS release
8.16
Serverless release
TBD
Feature differences
N/A
API docs impact
Prerequisites, privileges, feature flags
N/A
The text was updated successfully, but these errors were encountered: