Oops - readds sections

docs/serverless/settings/advanced-settings.asciidoc

@@ -200,6 +200,14 @@ Adds a link to https://www.dnschecker.org[https://www.dnschecker.org] on **IP de
 ]
 ----
 
+[discrete]
+[[enable-ccs-warning]]
+== Configure cross-cluster search privilege warnings
+
+Each time a detection rule runs using a remote cross-cluster search (CCS) index pattern, it will return a warning saying that the rule may not have the required `read` privileges to the remote index. Because privileges cannot be checked across remote indices, this warning displays even when the rule actually does have `read` privileges to the remote index.
+
+If you've ensured that your detection rules have the required privileges across your remote indices, you can use the `securitySolution:enableCcsWarning` setting to disable this warning and reduce noise.
+
 [discrete]
 [[show-related-integrations]]
 == Show/hide related integrations in Rules page tables