diff --git a/x-pack/plugins/security_solution/cypress/e2e/exceptions/alerts_table_flow/rule_exceptions.cy.ts b/x-pack/plugins/security_solution/cypress/e2e/exceptions/alerts_table_flow/rule_exceptions.cy.ts
index 59af4592d2ebe..0861bf1231e28 100644
--- a/x-pack/plugins/security_solution/cypress/e2e/exceptions/alerts_table_flow/rule_exceptions.cy.ts
+++ b/x-pack/plugins/security_solution/cypress/e2e/exceptions/alerts_table_flow/rule_exceptions.cy.ts
@@ -169,7 +169,7 @@ describe('Rule Exceptions workflows from Alert', () => {
      */
     validateExceptionCommentCountAndText(
       1,
-      'Exception conditions are pre-filled with relevant data from alert with "id"'
+      'Exception conditions are pre-filled with relevant data from an alert with the alert id (_id):'
     );
 
     addExceptionFlyoutItemName(ITEM_NAME);
@@ -207,7 +207,7 @@ describe('Rule Exceptions workflows from Alert', () => {
      */
     validateExceptionCommentCountAndText(
       1,
-      'Exception conditions are pre-filled with relevant data from alert with "id"'
+      'Exception conditions are pre-filled with relevant data from an alert with the alert id (_id):'
     );
 
     addExceptionFlyoutItemName(ITEM_NAME);
diff --git a/x-pack/plugins/security_solution/public/detection_engine/rule_exceptions/components/add_exception_flyout/translations.ts b/x-pack/plugins/security_solution/public/detection_engine/rule_exceptions/components/add_exception_flyout/translations.ts
index 215bb3fc29923..d27d7994bb375 100644
--- a/x-pack/plugins/security_solution/public/detection_engine/rule_exceptions/components/add_exception_flyout/translations.ts
+++ b/x-pack/plugins/security_solution/public/detection_engine/rule_exceptions/components/add_exception_flyout/translations.ts
@@ -90,6 +90,6 @@ export const ADD_RULE_EXCEPTION_FROM_ALERT_COMMENT = (alertId: string) =>
     {
       values: { alertId },
       defaultMessage:
-        'Exception conditions are pre-filled with relevant data from alert with "id" {alertId}.',
+        'Exception conditions are pre-filled with relevant data from an alert with the alert id (_id): {alertId}.',
     }
   );