Skip to content

Removes alert suppression line from RN and highlights #6313

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Dec 13, 2024
Merged

Removes alert suppression line from RN and highlights #6313

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion docs/release-notes/8.17.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -92,7 +92,6 @@ On November 12, 2024, it was discovered that manually running a custom query rul
[[features-8.17.0]]
==== New features
* Adds a signature option for trusted applications on macOS ({kibana-pull}197821[#197821]).
* Allows you to use alert suppression on EQL sequence alerts ({kibana-pull}189725[#189725]).
* Adds GA support for the case action feature, which lets rules automatically create cases ({kibana-pull}196973[#196973]).

[discrete]
Expand Down
10 changes: 1 addition & 9 deletions docs/whats-new.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,20 +11,12 @@ Other versions: {security-guide-all}/8.16/whats-new.html[8.16] | {security-guide
// tag::notable-highlights[]

[float]
== Detection rules and alerts enhancements

[float]
=== Logsdb index mode with detection rules and alerts
== Logsdb index mode with detection rules and alerts

The {ref}/logs-data-stream.html[logsdb index mode] allows you to store log data more efficiently. If you're considering using it, refer to {security-guide}/detections-logsdb-index-mode-impact.html[Using logsdb index mode with {elastic-sec}] to learn how it can impact your rules and alerts.

NOTE: To use the {ref}/mapping-source-field.html#synthetic-source[synthetic `_source`] feature, you must have the appropriate subscription. Refer to the subscription page for https://www.elastic.co/subscriptions/cloud[{ecloud}] and {subscriptions}[{stack}/self-managed] for the breakdown of available features and their associated subscription tiers.

[float]
=== Suppress alerts for EQL sequence rules

{security-guide}/alert-suppression.html[Alert suppression] now supports the EQL sequence rule type. You can use it to reduce the number of repeated or duplicate detection alerts generated from EQL sequence rules.

[float]
== Signature option available for macOS trusted applications conditions

Expand Down
Loading