Skip to content

Commit

Permalink
[8.1] [BUG] Adding .internal indices permission necessity for rule pr…
Browse files Browse the repository at this point in the history
…eview feature permission docs (backport #3067) (#3102)

Co-authored-by: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com>
  • Loading branch information
mergify[bot] and nastasha-solomon authored Mar 29, 2023
1 parent 588ac68 commit 2dcfbf0
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 2 deletions.
2 changes: 1 addition & 1 deletion docs/detections/rules-ui-create.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -256,7 +256,7 @@ field values.

You can preview custom query, threshold, machine learning, or event correlation rules to learn how noisy a rule will be before submitting it. If necessary, you can then adjust the rule's query.

NOTE: To preview rules, you need the `read` privilege to the `.preview.alerts-security.alerts-<space-id>` index and `All` privileges for the Security feature. Refer to <<detections-permissions-section>> for more information.
NOTE: To preview rules, you need the `read` privilege for the `.preview.alerts-security.alerts-<space-id>` and `.internal.preview.alerts-security.alerts-<space-id>-*` indices, plus `All` privileges for the Security feature. Refer to <<detections-permissions-section>> for more information.

To preview a rule:

Expand Down
6 changes: 5 additions & 1 deletion docs/getting-started/detections-req.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,11 @@ a|The `manage`, `write`,`read`, and `view_index_metadata` index privileges for t

| Preview rules
|N/A
a| The `read` privilege for the `.preview.alerts-security.alerts-<space-id>` index
a| The `read` privilege for the following indices:

* `.preview.alerts-security.alerts-<space-id>`
* `.internal.preview.alerts-security.alerts-<space-id>-*`

|{kib} space `All` privileges for the `Security` feature (refer to
{kibana-ref}/xpack-spaces.html#spaces-control-user-access[Feature access based on user privileges])

Expand Down

0 comments on commit 2dcfbf0

Please sign in to comment.