Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DOCS] Exception lists - 7.11 #467

Merged
merged 4 commits into from
Feb 8, 2021
Merged

[DOCS] Exception lists - 7.11 #467

merged 4 commits into from
Feb 8, 2021

Conversation

jmikell821
Copy link
Contributor

@jmikell821 jmikell821 commented Jan 21, 2021

Addresses #431.

Preview link.

@peluja1012
Copy link

@jmikell821 Thanks for documenting this new feature. Would you mind generating a preview link for this one? I'd like to take a look at the layout and the pictures more easily.

@jmikell821
Copy link
Contributor Author

Hey @peluja1012 - so sorry! Preview link is here.

[[manage-exceptions]]
=== View and manage exceptions

The Exception lists table enables you to view and manage all exceptions that have been assigned to rules. To view the Exception lists table, go to *Detections* -> *Manage detection rules*, then select the *Exception Lists* tab.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should say "view and manage all exception lists".

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 - would be great to get feedback on if users are understanding our lingo with lists. I think we've tried to stay consistent throughout but it does get confusing.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@yctercero @peluja1012 -- just adding my thoughts here. IMO, sometimes the language does get a little confusing. In the UI, it says "add a rule exception." Exception lists to me makes it sounds like there are multiple lists of exceptions, when all the exceptions are combined into a single list -- at least that's how it appears to me in the UI. Exceptions list sounds more accurate to what the UI is displaying. Perhaps I'm not understanding the feature completely but from a user perspective, that's what I see.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yea, I see what you're saying. Prior to adding this exception lists table, I could definitely see how it would appear to the user that there is only one exception list per rule when in reality multiple exception lists can be assigned to a single rule. It's probably even more confusing because there isn't yet complete exception list management available in the UI.

I assume that the more accurate functionality with exception lists is that you have numerous lists, any of which you can assign to 'x' number of rules. It's probably more a product question of how we want our users to understand the relationship between exception lists and rules.

@jmikell821
Copy link
Contributor Author

@yctercero @peluja1012 thanks for your feedback. Please let me know if it all looks good on your end. Preview link.

@jmikell821 jmikell821 merged commit 099a757 into master Feb 8, 2021
jmikell821 added a commit to jmikell821/security-docs that referenced this pull request Feb 8, 2021
jmikell821 added a commit to jmikell821/security-docs that referenced this pull request Feb 8, 2021
jmikell821 added a commit that referenced this pull request Feb 9, 2021
jmikell821 added a commit that referenced this pull request Feb 9, 2021
@jmikell821 jmikell821 deleted the values_exceptions-7.11 branch August 10, 2021 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants