-
Notifications
You must be signed in to change notification settings - Fork 194
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[DOCS] Exception lists - 7.11 #467
Conversation
@jmikell821 Thanks for documenting this new feature. Would you mind generating a preview link for this one? I'd like to take a look at the layout and the pictures more easily. |
Hey @peluja1012 - so sorry! Preview link is here. |
[[manage-exceptions]] | ||
=== View and manage exceptions | ||
|
||
The Exception lists table enables you to view and manage all exceptions that have been assigned to rules. To view the Exception lists table, go to *Detections* -> *Manage detection rules*, then select the *Exception Lists* tab. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should say "view and manage all exception lists".
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1 - would be great to get feedback on if users are understanding our lingo with lists. I think we've tried to stay consistent throughout but it does get confusing.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@yctercero @peluja1012 -- just adding my thoughts here. IMO, sometimes the language does get a little confusing. In the UI, it says "add a rule exception." Exception lists
to me makes it sounds like there are multiple lists of exceptions, when all the exceptions are combined into a single list -- at least that's how it appears to me in the UI. Exceptions list
sounds more accurate to what the UI is displaying. Perhaps I'm not understanding the feature completely but from a user perspective, that's what I see.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yea, I see what you're saying. Prior to adding this exception lists table, I could definitely see how it would appear to the user that there is only one exception list per rule when in reality multiple exception lists can be assigned to a single rule. It's probably even more confusing because there isn't yet complete exception list management available in the UI.
I assume that the more accurate functionality with exception lists is that you have numerous lists, any of which you can assign to 'x' number of rules. It's probably more a product question of how we want our users to understand the relationship between exception lists and rules.
@yctercero @peluja1012 thanks for your feedback. Please let me know if it all looks good on your end. Preview link. |
Addresses #431.
Preview link.