Skip to content

Commit 9509584

Browse files
[8.18] Add a docs page about Detection-as-code rules management (#6656)
* First draft * Moved locations * Update docs/detections/detection-engine-intro.asciidoc * Update docs/detections/detection-engine-intro.asciidoc Co-authored-by: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com> --------- Co-authored-by: Kseniia Ignatovych <40713348+approksiu@users.noreply.github.com>
1 parent 5dff666 commit 9509584

File tree

1 file changed

+11
-1
lines changed

1 file changed

+11
-1
lines changed

docs/detections/detection-engine-intro.asciidoc

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -116,4 +116,14 @@ setting is not enabled in the `elasticsearch.yml` file. For more information, re
116116
[[detections-logsdb-index-mode]]
117117
== Using logsdb index mode
118118

119-
To learn how your rules and alerts are affected by using the {ref}/logs-data-stream.html[logsdb index mode], refer to <<detections-logsdb-index-mode-impact>>.
119+
To learn how your rules and alerts are affected by using the {ref}/logs-data-stream.html[logsdb index mode], refer to <<detections-logsdb-index-mode-impact>>.
120+
121+
[discrete]
122+
[[manage-rule-dac]]
123+
=== Manage rules as code
124+
125+
Utilize the https://dac-reference.readthedocs.io/en/latest/dac_concept_and_workflows.html[Detection-as-Code] (DaC) principles to externally manage your detection rules.
126+
127+
The {elastic-sec} Labs team uses the https://github.com/elastic/detection-rules[detection-rules] repo to develop, test, and release {elastic-sec}'s <<prebuilt-rules, prebuilt rules>>. The repo provides DaC features and allows you to customize settings to simplify the setup for managing user rules with the DaCe pipeline.
128+
129+
To get started, refer to the https://github.com/elastic/detection-rules/blob/main/README.md#detections-as-code-dac[DaC documentation].

0 commit comments

Comments
 (0)