Skip to content

Commit

Permalink
[Request][Detection Engine][ESS][8.14] GA-ing alert suppression for c…
Browse files Browse the repository at this point in the history
…ustom query rule (#5114)

* Updates tech preview text

* Removing tag from custom query rule

* Reverting change to lang

Suppression page has the updated tech preview label lang. No need to change it elsewhere.

* Update docs/detections/rules-ui-create.asciidoc

Co-authored-by: Joe Peeples <joe.peeples@elastic.co>

* Update docs/detections/rules-ui-create.asciidoc

Co-authored-by: Joe Peeples <joe.peeples@elastic.co>

---------

Co-authored-by: Joe Peeples <joe.peeples@elastic.co>
(cherry picked from commit 0d835e1)
  • Loading branch information
nastasha-solomon authored and mergify[bot] committed Apr 30, 2024
1 parent a20a9f7 commit b4d69d0
Show file tree
Hide file tree
Showing 4 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion docs/detections/alert-suppression.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
--
Alert suppression requires a https://www.elastic.co/pricing[Platinum or higher subscription].

preview::[]
preview::["Alert suppression is in technical preview for threshold, indicator match, event correlation, and new terms rules. The functionality may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features."]
--

Alert suppression allows you to reduce the number of repeated or duplicate detection alerts created by these detection rule types:
Expand Down
2 changes: 1 addition & 1 deletion docs/detections/api/rules/rules-api-create.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -493,7 +493,7 @@ a detection rule exception (`detection`) or an endpoint exception (`endpoint`).
[[opt-fields-alert-suppression-create]]
===== Optional alert suppression fields for query, indicator match, threshold, event correlation (non-sequence queries only), and new terms rules

preview::[]
preview::["Alert suppression is in technical preview for threshold, indicator match, event correlation, and new terms rules. The functionality may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features."]

====== Query, indicator match, event correlation (non-sequence queries only), and new terms rules

Expand Down
2 changes: 1 addition & 1 deletion docs/detections/api/rules/rules-api-update.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -518,7 +518,7 @@ in the UI (*Rules* -> *Detection rules (SIEM)* -> *_Rule name_*).
[[opt-fields-alert-suppression-update]]
===== Optional alert suppression fields for query, indicator match, threshold, event correlation (non-sequence queries only), and new terms rules

preview::[]
preview::["Alert suppression is in technical preview for threshold, indicator match, event correlation, and new terms rules. The functionality may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features."]

====== Query, indicator match, event correlation (non-sequence queries only), and new terms rules

Expand Down
2 changes: 1 addition & 1 deletion docs/detections/rules-ui-create.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ When you use a saved query, the *Load saved query "_query name_" dynamically on

* Deselect this to load the saved query as a one-time way of populating the rule's *Custom query* field and filters. This copies the settings from the saved query to the rule, so you can then further adjust the rule's query and filters as needed. If the saved query is later changed, the rule will not inherit those changes.

. preview:[] (Optional, https://www.elastic.co/pricing[Platinum or higher subscription] required) Use *Suppress alerts by* to reduce the number of repeated or duplicate alerts created by the rule. Refer to <<alert-suppression>> for more information.
. (Optional, https://www.elastic.co/pricing[Platinum or higher subscription] required) Use *Suppress alerts by* to reduce the number of repeated or duplicate alerts created by the rule. Refer to <<alert-suppression>> for more information.

. Click **Continue** to <<rule-ui-basic-params, configure basic rule settings>>.

Expand Down

0 comments on commit b4d69d0

Please sign in to comment.