diff --git a/solutions/security/detect-and-alert/prebuilt-rules-update-modified-unmodified.md b/solutions/security/detect-and-alert/prebuilt-rules-update-modified-unmodified.md index bcaa8e5321..5eb83bf956 100644 --- a/solutions/security/detect-and-alert/prebuilt-rules-update-modified-unmodified.md +++ b/solutions/security/detect-and-alert/prebuilt-rules-update-modified-unmodified.md @@ -82,7 +82,7 @@ This table describes statuses that might appear for rule fields being updated. | **Ready for update** | Displays when there are no conflicts to resolve.

Further action is not required for the field. It is ready to be updated.
| | **No update** | Displays when the field is not being updated by Elastic, but the current field value differs from the original one. This typically happens when the field's value was changed after the prebuilt rule was initially installed.

Further action is not required for the field. It is ready to be updated.

**Tip**: You can still change the final field update, if needed. To do so, make your changes in the **Final update** section and save them.

| | **Review required** | Displays when Elastic auto-resolves a conflict between the current field value and the value from the incoming Elastic update.

You must accept or edit the field's final update and save the changes. Refer to [Resolve and reduce update conflicts](/solutions/security/detect-and-alert/prebuilt-rules-update-modified-unmodified.md#resolve-reduce-rule-conflicts) to learn more about auto-resolved conflicts and how to reduce future conflicts.
| -| **Action required** | Displays when Elastic could not auto-resolve the conflict between the current field value and the value from the incoming Elastic update.

You must manually set and save the field's final update. Refer to Refer to [Resolve and reduce update conflicts](/solutions/security/detect-and-alert/prebuilt-rules-update-modified-unmodified.md#resolve-reduce-rule-conflicts) to learn more about conflicts that need manual fixes and how to reduce future conflicts.
| +| **Action required** | Displays when Elastic could not auto-resolve the conflict between the current field value and the value from the incoming Elastic update.

You must manually set and save the field's final update. Refer to [Resolve and reduce update conflicts](/solutions/security/detect-and-alert/prebuilt-rules-update-modified-unmodified.md#resolve-reduce-rule-conflicts) to learn more about conflicts that need manual fixes and how to reduce future conflicts.
| ## Resolve and reduce update conflicts [resolve-reduce-rule-conflicts] @@ -107,4 +107,4 @@ If Elastic can't resolve a conflict, you must manually fix it before updating th 3. Click **Save and accept** to apply your changes. The field's status changes to `Ready for update`. -After you've resolved the remaining conflicts, click **Update rule** to accept the changes and install the updated version. \ No newline at end of file +After you've resolved the remaining conflicts, click **Update rule** to accept the changes and install the updated version.