Skip to content

Commit

Permalink
[8.16] [Serverless bug bash] Fixes style issue on Event filters page …
Browse files Browse the repository at this point in the history
…(backport #6162) (#6168)

* Fixes style issue on Event filters page (#6162)

(cherry picked from commit 73637d5)

# Conflicts:
#	docs/serverless/edr-manage/event-filters.asciidoc

* Delete docs/serverless directory and its contents

---------

Co-authored-by: natasha-moore-elastic <137783811+natasha-moore-elastic@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
  • Loading branch information
3 people authored Nov 19, 2024
1 parent 266953c commit 48211fe
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions docs/management/admin/event-filters.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -16,20 +16,20 @@ IMPORTANT: Since an event filter blocks an event from streaming to {es}, be cons

By default, event filters are recognized globally across all hosts running {elastic-defend}. If you have a https://www.elastic.co/pricing[Platinum or Enterprise subscription], you can also assign an event filter to a specific {elastic-defend} integration policy, which would filter endpoint events from the hosts assigned to that policy.

Create event filters from the Hosts page or the Event filters page.
Create event filters from the **Hosts** page or the **Event filters** page.

. Do one of the following:
+
--
* To create an event filter from the Hosts page:
* To create an event filter from the **Hosts** page:
.. Select the *Events* tab to view the Events table.
+
.. Find the event to filter, click the *More actions* menu (*...*), then select *Add Endpoint event filter*.
+
TIP: Since you can only create filters for endpoint events, be sure to filter the Events table to display events generated by the {elastic-endpoint}. +
For example, in the KQL search bar, enter the following query to find endpoint network events: `event.dataset : endpoint.events.network`.

* To create an event filter from the Event filters page:
* To create an event filter from the **Event filters** page:
.. Cick *Add event filter*, which opens a flyout.
--
+
Expand Down

0 comments on commit 48211fe

Please sign in to comment.