Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DOCS] Updating Elastic Security Overview topic #101922

Merged
merged 4 commits into from
Jun 16, 2021

Conversation

jmikell821
Copy link
Contributor

@jmikell821 jmikell821 commented Jun 10, 2021

Addresses #98829.

Preview link.

@jmikell821 jmikell821 added Team:Docs release_note:skip Skip the PR/issue when compiling release notes v7.13.0 labels Jun 10, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-docs (Team:Docs)


* Data is shipped from your hosts to {es} via beat modules and the Elastic
Endpoint Security agent integration:
** {security-guide}/install-endpoint.html[{es-sec-endpoint}] - Elastic agent integration that
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Only flagging because I'm not sure why the {es-sec-endpoint} attribute is showing up as {es-sec-endpoint} in this sentence instead of Endpoint Security.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

event is discovered, a detection alert is generated. External systems, such as
Slack and email, can be used to send notifications when alerts are generated.
You can create your own rules and make use of our {security-guide}/prebuilt-rules.html[prebuilt ones].
*** {security-guide}/detections-ui-exceptions.html [Exceptions]: Reduce noise and the number of
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Think the space between the topic link and the [Exceptions] might need to be removed for the text to show up as linked text.

** {security-guide}/cases-overview.html[Cases]: An internal system for opening, tracking, and sharing
security issues directly in the Security app. Cases can be integrated with
external ticketing systems.
** {security-guide}/admin-page-ov.html[Administration]: View and manage hosts running {es-sec-endpoint}.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Flagging because this is showing up as {es-sec-endpoint} instead of Endpoint Security in the output.

Copy link
Contributor

@nastasha-solomon nastasha-solomon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overall, LGTM!

false positives. Exceptions are associated with rules and prevent alerts when
an exception's conditions are met. *Value lists* contain source event
values that can be used as part of an exception's conditions. When
{es-sec-endpoint} is installed on your hosts, you can add malware exceptions
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is another one that needs to be changed to either "{endpoint-sec}", "{elastic-sec}", or "{elastic-endpoint}" depending on the correct product for this context:

Suggested change
{es-sec-endpoint} is installed on your hosts, you can add malware exceptions
{endpoint-sec} is installed on your hosts, you can add malware exceptions

[discrete]
=== Compatibility with cold tier nodes

Cold tier is a {ref}/data-tiers.html[data tier] that holds time series data that is accessed only occasionally. In {stack} version >=7.11.0, {es-sec} supports cold tier data for the following {es} indices:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In {stack} version >=7.11.0, {es-sec} supports ...

This is another attribute that doesn't seem to exist in https://github.com/elastic/docs/blob/master/shared/attributes.asciidoc at the moment. It either needs to be added there or a different existing attribute chosen from that file.

Copy link
Contributor

@KOTungseth KOTungseth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One small comment, but otherwise, LGTM.

docs/siem/siem-ui.asciidoc Outdated Show resolved Hide resolved
@jmikell821 jmikell821 merged commit dcb5a67 into elastic:master Jun 16, 2021
jloleysens added a commit to jloleysens/kibana that referenced this pull request Jun 17, 2021
…egrations-to-global-search

* 'master' of github.com:elastic/kibana: (46 commits)
  [Lens] Add some more documentation for dynamic coloring (elastic#101369)
  hide not searchable results when no term (elastic#102401)
  [Lens] Fix Formula functional test with multiple suggestions (elastic#102378)
  Fix trusted apps modified by field displayed as a date field (elastic#102377)
  [Lens] Docs for time shift (elastic#102048)
  update readme of logs-metrics-ui (elastic#101968)
  Refactor observability plugin breadcrumbs (elastic#102290)
  [Index Patterns] Move rollup config to index pattern management v2 (elastic#102285)
  [Security Solution][Endpoint] Isolate Action should only be available to Platinum+ licenses (elastic#102374)
  [build] Updates Ironbank templates (elastic#102407)
  Update security best practices document (elastic#100814)
  [Enterprise Search] Set up initial KibanaPageTemplate  (elastic#102170)
  [Reporting/Docs] Add section to troubleshooting guide to explain the StatusCodeError logs (elastic#102278)
  [DOCS] Updating Elastic Security Overview topic  (elastic#101922)
  [Uptime] refactor Synthetics Integration package UI (elastic#102080)
  [Task Manager] Log at different levels based on the state (elastic#101751)
  [APM] Fixing time comparison types (elastic#101423)
  [RAC] Update alert documents in lifecycle rule type helper (elastic#101598)
  [ML] Functional tests - fix and re-activate alerting flyout test (elastic#102368)
  [Reporting] remove unused reference to path.data config (elastic#102267)
  ...

# Conflicts:
#	x-pack/plugins/fleet/kibana.json
majagrubic pushed a commit to majagrubic/kibana that referenced this pull request Jun 18, 2021
* updating overview topic for Kibana

* formatting fixes

* small formatting tweaks

* small formatting tweaks
@kibanamachine
Copy link
Contributor

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create backports run node scripts/backport --pr 101922 or prevent reminders by adding the backport:skip label.

@kibanamachine kibanamachine added the backport missing Added to PRs automatically when the are determined to be missing a backport. label Jun 18, 2021
@kibanamachine
Copy link
Contributor

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create backports run node scripts/backport --pr 101922 or prevent reminders by adding the backport:skip label.

1 similar comment
@kibanamachine
Copy link
Contributor

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create backports run node scripts/backport --pr 101922 or prevent reminders by adding the backport:skip label.

@jmikell821 jmikell821 added v7.14.0 v8.0.0 auto-backport Deprecated: Automatically backport this PR after it's merged labels Jun 22, 2021
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Jun 22, 2021
* updating overview topic for Kibana

* formatting fixes

* small formatting tweaks

* small formatting tweaks
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Jun 22, 2021
* updating overview topic for Kibana

* formatting fixes

* small formatting tweaks

* small formatting tweaks
@kibanamachine
Copy link
Contributor

💚 Backport successful

Status Branch Result
7.13
7.x

The backport PRs will be merged automatically after passing CI.

kibanamachine added a commit that referenced this pull request Jun 22, 2021
* updating overview topic for Kibana

* formatting fixes

* small formatting tweaks

* small formatting tweaks

Co-authored-by: Janeen Mikell-Straughn <57149392+jmikell821@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request Jun 22, 2021
* updating overview topic for Kibana

* formatting fixes

* small formatting tweaks

* small formatting tweaks

Co-authored-by: Janeen Mikell-Straughn <57149392+jmikell821@users.noreply.github.com>
@kibanamachine kibanamachine removed the backport missing Added to PRs automatically when the are determined to be missing a backport. label Jun 22, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-backport Deprecated: Automatically backport this PR after it's merged release_note:skip Skip the PR/issue when compiling release notes Team:Docs v7.13.0 v7.14.0 v8.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants