We've received a number of questions around the format and available options for constructing the message within Action UI when creating/editing Rules. This enhancement is for adding a docs link within the UI so users can better understand their options and proper formatting necessary to achieve their use case. In addition to a docs link, we could also add a template selector that could be pre-populated with popular templates per rule type or other use cases -- defer to @elastic/security-design on any additional UX enhancements outside of the docs link.

Useful Docs Links:

• https://www.elastic.co/guide/en/security/7.13/rules-ui-create.html#rule-action-variables
• https://www.elastic.co/guide/en/security/current/rules-ui-create.html#create-threshold-rule

Figma mock link for designs